failed to connect a windows service message Results


Page 2 of 3.
Results 21...40 of 47

Sponsored Links:



Good day to all.

Just installing a brand new 2 TB drive in my older IBM ThinkCentre - running Windows XP Pro SP3. This drive is being installed as a data drive only - the original drive will remain as the boot drive. I want to create a single partition that uses the full capacity of the drive.

However, I now can't run the Disk Management snapin - I get the error message "The Disk Management console failed to connect to the remote computer because the Disk Management remote service is not in the Windows Firewall exception list. Add the Disk Management remoting service (dmremote.exe) to the Windows Firewall exception list and try again."

Power down the computer, unplug the SATA data connector, reboot, its all good.

Power down, re-connect the SATA drive, above error message occurs.

This is one of WD's new "green" drives with EARS. I *think* that means that it uses 4k sector sizes instead of 512 byte sectors.

Anyway, I don't know what to try next.

What I have done so far:

The drive has a label that says: "Windows XP single partition - set jumper on pins 7&8 before installation or use WD Align SW". My first kick at the cat was with the jumper installed. When that failed, I powered the system down and removed the jumper. Rebooted, downloaded and ran the WD Align software from WD. The software says that the drive is already aligned and exits cleanly. No better either way: with jumper installed or without.

Added c:windowssystem32dmadmin.exe to the windows firewall programs exceptions list (as per a suggestion from a Google search). Did not help but I have not yet removed the exception.

Tried finding "dmremote.exe" - that file does not exist on my computer.

Fired up Device Manager, browsed to the drives section, selected the new WD drive. The General tab says that the device is working correctly, the Volumes tab shows that the drive is empty. Clicking on the "Populate" button gives me the error message "Volume information for this disk cannot be found. This may happen if the disk is a 1394 or a USB device on a Windows 2000 machine". Clicking on the Drver tab shows that the driver is the original Microsoft driver dating back from 7/1/2001. Clicking on Update Driver and allowing Windows to search (online) for the best driver has no results - it comes back saying that the current driver is already the best driver.

Looked at the error message again - thought about it a bit. Went and turned Windows Firewall OFF. Figured: if its a firewall issue, get rid of the firewall (temporarily). Didn't help - now I get a different error message: "The system cannot find the file specified". The bottom of the Disk Management screen says "Unable to connect to Logical Disk Manager service". Turned Windows Firewall back on again.

Tried a handful of other suggestions but nothing has helped yet.

Has anyone run into this yet? Any suggestions I might try?

Many thanks!

dwayne




Let's see if I can explain the current situation without causing even more confusion! hahaha

I have two XP machines (Home w/SP-2) that are connected by a crossover cable. The network protocol is ICS through TCP/IP. Internet access is obtained through a USB satellite modem (SRS). Everything was working perfectly. Now, I installed NSW 2005 the other day and that's when the problem started. So, I'm ASSUMING that this is where I should be looking to resolve the issue, right? And I'm going to further assume that it is probably to do with NAV, specifically??

Here's the problem: Neither the host nor the client PC can obtain an IP. Host: manually set IP of 10-100-10-239/Subnet mask: 255.255.255.0/Default Gateway: 205.177.62.75. These settings are correct for the Satellite USB Device properties. NIC TCP/IP properties are also manually entered as, IP: 192.168.0.1, Subnet mask: 255.255.255.0. Again these settings are correct. On the client's NIC TCP/IP properties, it is set to obtain IP address automatically, again... as it should be and always has been.

However, neither NIC can find an IP. The display message is, "Aquiring network address". When I try to share the USB Satellite Device, it fails and the message is, "Failure is due to the RPC service is unavailable." The Host has Internet access.

One more item, which may be incidental to all this. When I bootup the Host, a "Windows Installer" dialog pops up and then after a bit, Norton displays a dialog error message that it doesn't support the Repair something and to unintstall and re-install. There is no indication what the Windows Installer was trying to do nor what couldn't be repaired by Norton??

Okay... I apologize for the length here, but hopefully someone will be able to help me resolve this problem. FYI, no viruses, no adware, malware, trojans, etc., have been found on either system. Both are clean.

TIA,

Jeff




According to PerfectDisk Blog Service Pack 2 for PerfectDisk 8 has been released. Get it your usual ways. Here's What's New:

What's new in PerfectDisk build 8.00.45

PerfectDisk Command Center
Corrected a bug which caused the password used on deployment to be incorrectly encrypted. This resulted in a bad length or bad data error on deployment of PerfectDisk from the Command Center.
Alternate synchronize interface is available for customers experiencing sync issues.
Added a registry value to block going to the Raxco web site when clicking on the Online Resource Tab.
Fixed a SQL statement for SQL 2000 and SQL 2005 servers.
Added more detail to the error messages when the Command Center fails to connect to a client.
Stopped the auto-refresh function from rerunning reports. This was causing the report data to change while you were reviewing it.
Stopped the auto-refresh function from refreshing the Online Resources Tab.
Increased the size of the History Dialog.
Corrected various sort issues where data was not being sorted according to its data type (dates, numbers, text).
Added support for non-English characters to the email notifications (utf-7 encoding).
Help Files have been updated.

PerfectDisk Client
Added additional code to support Vista. This still requires the special Vista Beta from Raxco Software.
Added a registry value to block going to the Raxco web site when clicking on the Online Resource Tab.
Fixed a bug where the disk bitmap was not being updated when it should have been.
Added code to clean up the WMI database when uninstalling PerfectDisk on Windows XP and Windows Server 2003.
Corrected a display issue when resizing the screen.
Added code to prevent the same file type being used in multiple File Type Groups. For example, .txt can now only belong to a single file type group.
Corrected various sort issues where data was not being sorted according to its data type (dates, numbers, text).
Changed the defrag driver to support Vista on X64 platforms. This still requires the special Vista Beta from Raxco Software.
Help Files have been updated.

Joe




Hi There, I have this odd problem that I was hoping someone might recognise.
MY Windows 2000 Service Pack 4 PC is taking 40 minutes to boot. It gets through the POST and the Windows splash with the increasing bar at the bottom of the screen and then it displays the starting messages ( Network settings, Applying Computer Settings etc) this phase takes about 15 minutes. Then I can log in and then it displays "Loading your personnel settings" for about 25 minutes. After that it runs mostly as normal except IE6 takes 30 seconds to launch and Office products slow down at launch.

After extensive research ( i.e. Duel boot machine so tested with Win98, found no problem. Used Ghost to return to a 5 month old version of Win 2000, problem persisted. Removed CD drives, DVD drives, Hard drive in sequence to see if one might be the cause, problem persisted. Replaced router, problem persisted.)

However, I found this out. The slow downs only occurs if my Windows 2000 server is on.
If I boot and then plug in the Network cable ( or the server is off when I boot ) then I can boot windows in a normal time. After that I plug in the network cable and only IE^ and Office are slow. If I unplug again then Office and IE6 start quickly again.

I checked the Server Event System Log and saw this.

Event 5722
"The session setup from the computer Cheech failed to authenticate.
The name of the account referenced in the security database is Cheech$ The following error occurred:
Access is denied. "

Is this the problem do you think or is this a red herring?

I'm not too hot on 2000 Server so any suggestions are welcome.

Cheers for any help, sorry this is so long.

Richard

Network:

Windows 2000 server. Used to authenticate to Domain and as web server
Windows 2000 pro. Workstation
Windows 98SE. Workstation
ADSLmodem/router. Used as DHCP server. Seems to set itself up as DNS server or forwarder?




I spent part of the past week trying to build a WAMP environment on a relative's computer while I was visiting. I couldn't get MySQL to install. I hope to figure out what went wrong before the next time I'm there.

The installation failed in the "installing and starting service" step, with the message "could not start the service." The Event Viewer gave only the message "Faulting application mysqld.exe, version 5.5.16.0, faulting module mysqld.exe, version 5.5.16.0, fault address 0x0023f7a8."

I tried everything I can think of, including uninstall/reinstall, downloading a new copy of the installation file, and shutting down Apache during the install.

What might be wrong? If the problem can't be identified, what else might I try?

The system is WinXP SP3. The MySQL installer is mysql-5.5.16-win32.msi. I'd already installed Apache 2.2.21 and PHP 5.2.17 and confirmed that they work properly.

The options I chose for the installation were:

Setup type: Typical
Configuration: Detailed
Server type: Developer
Database usage: Multifunctional
InnoDB Tablespace settings: 'C:MySQL Datafiles
Connections: Decision Support
Networking: TCP/IP enabled, port number 3306, firewall exception enabled or disabled (I've tried both)
Character set: standard
Windows options: Install as Windows service, service name MySQL, Launch automatically selected
Security options: enabled... remote not selected, anonymous account not selectedNew WinXP installation




Problem description:
Two Vista machines. Sometimes the network sharing does work, and sometimes it does not. Using Process Explorer I can see no activity that might indicate a problem. The connection seems to come and go without a pattern, other than it is gone more that it is go. Shares will work, and suddenly be unavailable.

But the Internet is always available. On the new pc Norton 360 was provided as a freebie, but I have not completed the installation. Instead, I removed the register keys that cause the program to start up. Once I get this network problem solved I will worry about installing Norton. What I really need are ideas of where to look for possible causes. In case the texts are not perfect, I have done a rough translation from Dutch.
Thanks to all who contribute, I am at my wits end.

Maury

Error message:
CHANVISTA is not accessible. You may possible not have the correct authorizations for this network source. Contact the administrator of the server if you want to know which access privileges you have.

The Server-service has not been started.

But if I look at the Services, the server service is shown as running.

In the network center, I have the following on both pc's:
Network detection: enabled
Share files: enabled
Share public folders: enables
Share printers: enabled
Password enabled sharing: disabled
Share media: disabled

The initial picture in the network center on both machines shows this computer connected to the network TEKST connected to the Internet.

If I then show the complete network, both pc's are shown. Coming from each pc is a horizontal double-line, connecting these two is a single vertical line, and it looks like a single line to the switch from where they join. Further then are double lines from the switch to the gateway to the Internet.

Physical Connectivity:

Please describe your physical network configuration (what routers, switches, broadband connectivity etc.)
A Sitecom router which is connected further up the line to the modem for ADSL.

Do all PCs have ethernet cables connecting them to a common switch or router?
Yes

Can you see green and orange lights on the network cards and switch, where the ethernet cables plug in? What state are these lights in?
All lights are green as they should be, and one pc has a blinking yellow light to indicate date transfer. The other pc shows 2 green lights.

Firewalls:
If you have a hardware firewall then check that it allows the PCs to talk to each other
There is no hardware firewall.

If you have software firewalls on the PCs then check that they allow the PCs to talk to each other
Windows firewall has been turned off on both systems. One system has Norton 360 installed. On this system I have disabled the Symantec Network Security Intermediate Filter Driver. Interestingly Norton always says that I am not connected to a network.

Make sure you don't have more than one software firewall on any of the PCs. If you use a third party software firewall then the built-in Windows firewall should be turned off.
It is turned off.

If you have ever had any other software firewalls installed then check that they have been completely removed
The Norton firewall has been turned off and as mentioned above the filter driver has been disabled. On the other machine I have disabled the startup of Norton.

Temporarily turn off all firewalls (disconnect from the internet first if you can)
Done

IP addresses:

Type IPCONFIG from a command prompt on each PC, what is the IP Address? What is the default gateway address?
192.168.0.3 and 0.4, with 0.1 as gateway

Can each PC access the internet?
Yes, no problem

Type PING a.b.c.d from a command prompt on each PC, where a.b.c.d is the gateway address from above. What output do you get?
4x reply within 1 ms

Type PING e.f.g.h from a command prompt on each PC, where e.f.g.h is the IP Address of the other PC. What output do you get?
4x reply within 1 ms

Please note, that when the network decides not to work, I also get 4x timeout which makes would normally indicate some kind of firewall blocking traffic to everything except the gateway. But the firewalls are either off or disabled.

Type PING computername from a command prompt on each PC, where computername is the Name of the other PC. What output do you get?
ping to chanvista: 4x reply within 1 ms
ping to vista1: 4x reply within 1 ms

User accounts:

Make sure that you are using the same username and password on all PCs
Chan and Marcella on both pc's, no passwords in use

Make sure the guest account is enabled by typing
net user guest /active:yes
to a command prompt on each PC
Done, the accounts are set active anyway via the user administration.

Create a new (temporary) username on each PC, for example Testnet, with the same password, and log in to this account on each PC
Not done

Other Diagnostics:

Start > Run > NETSH DIAG GUI, Wait for the window, Click Scan your system. Which tests pass? Which tests fail?
Cannot run this as Vista does not recognize the DIAG parameter

At a command prompt on each PC:

NET USE * /DELETE

NET USE computernameIPC$ /user:username (where computername is the name of the other computer and username is the temporary username).

What exact error do you get?
The requested network name is no longer available.

NET VIEW computername (where computername is the name of the other computer). What exact error do you get?
The requested network name is no longer available.

NET VIEW computername (where computername is the name of the computer you are typing on). What exact error do you get?
No error, but a list of the shared folders.

Right click My Computer > Manage > Open Shared Folders

Look in Sessions, Does it show a connection from the other computer?
No

Look in Shares. Does it show the shared folders that you expect it to?
Yes




I have had two Yahoo mail addresses for several years, and have always downloaded incoming mail using POP3 to Outlook (originally OL 2003, for the last year or so, OL 2010). This has been working successfully all this time (until recently). I have read comments that Yahoo does not support POP3, but I understand that this only applies to certain countries for some reason (notably USA). In any case, it works fine in my country (Australia). In troubleshooting this problem, I have revisited the Yahoo mail options and it is still there and still set up under "POP & Forwarding".

So, the problem: a couple of weeks ago, I started getting pop-up messages from Outlook prompting for User Name and Password (both of which fields were already populated with the correct information). This suggests to me that Outlook failed to login to the Yahoo POP3 mail server. It happens with both my Yahoo email addresses, but not with other addresses that I have with Gmail and my ISP.

Searching through the Lounge to see if this problem has been reported before, I found only one which was similar
(http://windowssecrets.com/forums/sho...Bpop%2Boutlook). The solution given there is not applicable to me (upgrade to paid service).

In my case, the problem is not that I cannot connect at all, just that the failure to connect is intermittent. Currently, I have Outlook set to check the servers every 30 minutes. In the last 2-3 weeks, more often than not, the Yahoo connection fails on one or both of my Yahoo accounts with the resulting pop-up described above. However, sometimes it gets through OK. One impact is that I may have to wait a few hours to get my mail downloaded. Another is that every half hour I get the pop-up suddenly displaying on top of the window I am working on at the time (VERY annoying after a while!).

At first I thought it might be an internet problem, but I am not having any other network problems -- even the Yahoo SMTP server connects every time when I am sending email. I have pinged the POP3 server a number of times: it always responds normally. Accessing my accounts via webmail also works OK.

I was about to add that I seem to have gotten a reprieve today, with no occurrences of the problem. But then I had the dreaded pop-up appear while typing this post.

Anyway, I was just wondering if anyone has seen this before and, better yet, has an answer to what is happening, hopefully also a solution! I am thinking of changing over to Gmail as my primary address, but that would be a major project as my Yahoo addresses are in use by too many people and subscriptions.

Forwarding, rather than POPping is another alternative, but that has problems as well (which I may save for a separate thread).

Thanks for any help.

Pete.

PS: Operating system is Windows 7 Pro (x64)




Running Windows 7 32-bit (current patch level) with above component. All of the following...

Picass 3.9, Paint Shop Pro 9, Microsoft Paint
fail when selecting a photo (jpg file) using the email option, and get error 8CCC003 in WLM.

As part of this process, I have my WLM configured to use my ISP email server (which works fine when I attach photos or insert jpg files directly). It also fails the same way when you select a photo file and use right click to select SEND from the drop down menu. Also, WLM is my default email program (something pointed out in Microsoft posts).

After the email send operation is initiated, when WLM comes up, it opens the Windows Live ID signon dialog. I don't have a Live ID. However, when I close that dialog to let WLM use my normal ISP connection, the generated email gets stuck in the OutBasket with the above error, and all future send/receive operations hard fail until that broken message is deleted.

This computer has XP installed (came with it from the vendor), and WLM 2009. Under that configuration, such email operations work fine as WLM 2009 does not come up with an attempt to use Live ID. The send just runs and the message arrives at its destination.

So, it appears that more recent versions of WLM that use the Live ID login, screw up the message such that it must be deleted, or have a "undocumented" requirement that precludes using WLM for such operations when a normal account uses an ISP email connection.

Anybody else experience this problem or have any workarounds WITHOUT having to resort to using Live ID? Having a Live ID does work (from Microsoft posts) but does expose your messages and files to SkyDrive.

On Picasa help, it is indicated that for this to work, one must use a gmail account or a Google account (where the file is posted to the Google cloud with a reference to the cloud location inserted in the email rather than attaching or inserting the actual file). Also, it is indicated that for Live ID connections, the file/photo is sent to SkyDrive with a reference to the SkyDrive location inserted in the email. This seems overbearing, ignoring normal ISP email services and inflicting my WLM configuration with a bad email message in the OutBasket.

Feedback appreciated. Workarounds?




I just got my Windows Vista laptop out for the first time in several months. I use it primarily for trips, and I always update Windows before I leave. Have never had problems with this before, but today when I open Windows Update and then click on Check for Updates, I get this message, "Windows Updates cannot currently check for updates, because the service is not running. You may need to restart your computer.". Restarting the computer does not help, additional tries all fail. I ran a complete virus scan, my internet connection is working, and my desktop Windows 7 PC checks updates the same as always.

Also, I am getting a blank result when checking the update history. I've been through the restarting process several times without getting the update check. Somewhere in the middle of these repeat efforts, one time I did get the update history, but only one time, and I still didn't get the update check.

I'm looking for advice. Thanks, Jerry




My problem is that I now have a PC which is totally unusable because after doing a system recovery it stalls when trying to instal Windows and it ‘can’t instal Vista in Safe Mode..’. Consequently, I can’t use the PC at all, particularly to uninstall the suspected faulty driver [nvlddmkm].

I would be very grateful for any help, for example, how I could uninstall the display driver which is probably causing the crash and get windows installed and working sufficiently for me to upload a new driver, to get passed this problem (via DOS..?) ?

I apologise for the length of this posting but I hope I’m giving helpful information about the problem/s and what I’ve done already – but sorry if it’s irrelevant/too much info!!

PC DETAILS
HP Pavilion a6250.uk Desktop PC
Microsoft Windows Vista Home Premium 32 Service Pack 2
NVIDIA GeForce 8400GS video card
HP w2007v monitor

PRIOR TO PROBLEM
All Windows, HP and security updates updated automatically, firewall set up and secure etc. All updates for hardware, such as video card, updated automatically (via HP alerts). No new hardware added to the computer since new, no new software added to the PC for ~12 months. No hardware attached to the PC except for printer and router when problems occurred.

PROBLEM
I periodically received [the dreaded!] error message:

Problem Event: BlueScreen
Problem description: PC DETAILS:
OS Version: 6.0.6002.2.2.0.768.2
Locale ID: 2057
BC Code: 116
BCP1: 877EC008
BCP2: 8E6C5150
BCP3: 00000000
BCP4: 00000002
OS Version: 6_0_6002
S.Pack: 2_0
Product: 768_1

Doing a system restore and/or using safe mode enabled PC to be continued to be used and shutdown properly, initially whilst I researched the problem - and discovered how common the fault was; I tried to find an update for the video card and whilst continuing to try to rectify the problem, including doing the in-built computer check (everything passed), I got the message:

“Display driver nvlddmkm failed and recovered…”, before failing again and not recovering.

WHAT I’VE DONE
1. Disconnected the router and printer so only keyboard, mouse and monitor connected. Did System Recovery using program on hard drive to get back to factory settings. Although it said it was successful it was exactly as before and it went straight to BlueScreen.

2. Re-did System Recovery using the discs I created when PC was new. Worked sufficiently to get to the stage of being offered the start of installing Vista, but display flaky and flickering. Each time it started ‘checking the computer’s performance…’ it got a little way then crashed. Tried to start in safe mode. Told ‘Vista can’t instal in safe mode…’ and so couldn’t continue. Tried system restore a few times to get back prior to Vista instal. Same as before; had to switch off without shutdown.

3. (Using anti-static wristband etc.) removed and re-seated: hard drive, RAM, graphics card and CMOS battery. Got BlueScreen on start up.

4. Using recovery discs, performed manufacturer menu:
- Cleared partition table
- Erased master boot record
- Wiped all sectors
Finished recovery. BlueScreen on start up. Offered Startup Repair.

5. Completed a startup repair and told:
Problem Event: StartupRepair
Problem Signature 01: Autofailover
Problem Signature 02: 6.0.6000.16386.6.0
Problem Signature 03: 2
Problem Signature 04: 131074
Problem Signature 05: FailureDuringSetup
Problem Signature 06: FailureDuringSetup
Problem Signature 07: 0
Problem Signature 08: 0
Problem Signature 09: unknown
Problem Signature 10: 1168
OS Version: 6.0.60000.2.0.0.256.1
Locale ID: 1033

Session Details
System Disk = DeviceHarddisk 0
Windows Directory = c:Windows
AutoChk Run = 0
Number of root causes = 1

[All tests performed successfully]

Root cause found:
Failure while setup in progress

So, back to square one..!
Any help VERY welcome




[EDIT: This issue is solved.]

I got this problem this morning and have been working on it for a few hours. I did a lot of Googling to see what might be causing it; nothing seems to be working. It's ethernet, not wireless, and I've had 0 network problems for the half a year since I got the computer; suddenly it doesn't work at all.

Stuff I've found/tried:
-Windows network diagnostics/troubleshooter is, of course, not able to fix it
-Neither rolling back drivers nor updating drivers fix it
-System restore doesn't fix it
-Various ipconfig commands do not fix it
-I do not have and never have had the "Bonjour" something service or iTunes installed which seem to have caused this for some people
-Stealing various settings from my laptop (which runs XP and works through the same cable) like the IP address, network address, default DNS servers and all other options while it was connected, then trying to use them as static IP etc. on my desktop computer doesn't fix it
-Disabling/enabling IPv6 and IPv4 doesn't fix it
-Adding a specific registry key per an old Microsoft KB something article for a similar problem in Vista doesn't fix it (I've since removed the key; it was pretty clearly not the same issue, was for people who upgraded from XP to Vista and suddenly got this error message, whereas I've been using Windows 7 for months with no problems until this)
-Executing this script through an elevated Powershell command window does nothing: dimeby8 : Change ?Unidentified network? from Public to Work in Windows 7
-Wishing really hard doesn't fix it
-Various resets I found through Google like some cmd thing using "netsh" don't do anything

Other relevant information:
-Although this is the first time I've had network issues with this computer it's not the first time I've had network issues so I made sure to try pinging things. Pinging a domain like google.com doesn't work because it can't find it, but I am pretty sure this is not a DNS issue as pinging an IP address doesn't work either (I get the message "PING: transmit failed. General failure.", something I have never even seen before... all the problems I've had in the past it would just time out or something)
-ipconfig /all's listing for "default gateway is blank." Obviously this is an issue. When I tried using static IP etc copied from what it gave my laptop, though, one of the things I brought over was the default gateway, and I still couldn't connect, so I have no idea. I've attached the ipconfig log.
-I do not have access to the router as I live in a dorm, but I don't think it's a router issue anyway. Computer connects perfectly for half a year, then stops working, and laptop that I've never used wired internet with can still connect through it? Sounds more like a computer issue to me, but maybe not. I can of course ask them to reset the router, but honestly even if they would I don't know if the dorm heads have any idea what a router is or where it would be.
-I am out of ideas.

I'm going to be gone for a few hours so during that time I'm going to completely power down my computer and unplug in the hopes that on the slim chance there's anything screwed up hardware-wise that is staying on somehow even through restarts that by the time I get back and plug everything back in it'll have shut off and will be working properly again. This worked for me, like, once, when a monitor wouldn't turn on. This seems a lot more specific though and I do not have high hopes. Attached Thumbnails Last edited by TRM; 01-28-2010 at 10:56 AM. Share Share this post on Digg Del.icio.us Technorati Twitter
Reply With Quote .postbitlegacy .postfoot .textcontrols a.post_info_button, .postbit .postfoot .textcontrols a.post_info_button { background: url(/images/post_infobox.png) no-repeat transparent left; padding-left: 20px; } .postbitlegacy .postfoot .textcontrols a.post_info_button:hover, .postbit .postfoot .textcontrols a.post_info_button:hover { background: url(/images/post_infobox-hover.png) no-repeat transparent left; JavaScript must be enabled 01-28-2010 #2 TRM Junior Member Thread Starter Enjoys Windows 7 Forums
Join Date Jan 2010 Posts 2 It didn't fix it. The good news is that I fixed the problem anyway! Out of options and rapidly using my sanity I decided to start combining various steps taken above that hadn't done anything individually in the hopes it would magically work. And it did! In my case what fixed it was a combination of disabling IPv6 AND giving myself a static IP, gateway and DNS servers (neither of which had worked on their own).

I cannot consider this really "fixed" in the sense that it should never have happened, happened for no apparent reason, and I worry I may have to redo all this anytime I move my computer, but hey, it's working, and I guess that's all that matters. Maybe this will help someone.




Hello,

Today I used the computer in the morning and it worked fine with no problems. However when I started the computer later on, it came to a blue screen. Then I did a system restore on my windows 7 service pack 1 update which failed a week ago.

Then I got an error saying it was unsuccesful but then booted fine to the desktop. Then on the desktop a message popped up saying the restore was succesful which was confusing.

Now then there was a big X on the internet connection icon with no internet connection. By the way my computer is connected to the router. Other devices and laptops in my house got internet except from the computer.

Not only that but now I can't open Windows Update, Network and Sharing folder or the system restore. Also the MMCs cannot open the file!

Is there any way to get the internet connection back on the internet please?

Thank You




Last night I logged of my Windows 7 RC 64-bit laptop. This morning I log on and the logon takes longer than usual. Finally a non-aero desktop appears and a message is displayed that the desktop could not be loaded or that the profile is damaged. I logged off and on again, rebooted, but could not log on to my account. The event viewer reports event IDs 1500, 1502, 1505, 1508, 1511, 1515 and 1542 - all related to user profiles.
I logged in from another account, but could not run programs from my original user. I found error messages "Windows cannot log you on because your profile cannot be loaded. Check that you are connected to the network, and that your network is functioning correctly. DETAIL - Access is denied."

I booted into repair mode from my memory stick and repaired the boot configuration, which did also not help.
Then I restored back to the one-before-last restore point. I noticed that this morning at 6:26 am a new restore point with the label 'critical update' had been created.
This fixed the problem!

What could be the reason? The critical update from 10/7/09 somehow made it impossible to log on to one specific account! Other accounts still worked, and then rolling back to a restore point from 10/5 fixes the problem. AFAIK restore points do not affect user profiles.




Hello fellow Newsgroup members. :-)

I have a computer running Windows XP Home Editon. This is a stand alone
computer, it is not connected to a network.

Since I have had my computer there are always 3 different Failure Audits
shown in the secruity log in the Event Viewer. The Event Viewer is under
Aministrative Tools in the Start Menu.

When I click on the Failure Audit event messages in the Event Viewer this is
the information given for each of the 3 different Failure Audits:

1ST FAILURE AUDIT:

Source: Secruity
Category: Policy Change
Type: Failure Audit
Event ID: 615
User: NT AUTHORITYNETWORK SERVICE

Description:
IPSec Services: IPSec Services failed to get the complete list of network
interfaces on the machine. This can be a potential security hazard to the
machine since some of the network interfaces may not get the protection as
desired by the applied IPSec filters. Please run IPSec monitor snap-in to
further diagnose the problem.
--------------------------------------------------------------------------------
I have tried to run the IPSec monitor snap-in but I could not figure out how
to use it. I clicked on the help link in the error message but the
information in the help web site is too technical for me to understand.

This event, 615 Policy Change, has a Failure Audit when the computer starts
and sometimes has a Success Audit straight after.

2ND FAILURE AUDIT:

Source: Secruity
Category: Account Logon
Type: Failure Audit
Event ID: 680
User: NT AUTHORITYSYSTEM

Description:
Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon account: "User Name"
Source Workstation: "Computer Name"
Error Code: 0xC000006A
----------------------------------------------------------------------------------
This event, 680 Account Logon, always has a Failure Audit when the computer
starts and always has a Success Audit straight after.

3RD FAILURE AUDIT:

Source: Secruity
Category: Logon/Logoff
Type: Failure Audit
Event ID: 529
User: NT AUTHORITYSYSTEM

Description:
Logon Failu
Reason: Unknown user name or bad password
User Name: "User Name"
Domain: "Computer Name"
Logon Type: 2
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: "Computer Name"
---------------------------------------------------------------------------------
I do have a password created for my Windows XP Account, which is an
administrators account. I enter the password on the welcome screen and I can
log on with no problem. So why do I have this error which says that there is
an "unknown user name or bad password" when I am able to log on perfectly??

This event, 529 Logon/Logoff, always has a Failure Audit. It has never had
a Success Audit!!! But like I said, I am always able to log on to my Windows
XP account using my user name and password at the welcome screen everytime.

QUESTIONS ABOUT THESE FAILURE AUDITS:

What are the causes of each of these 3 Failure Audits?

How can I fix these Failure Audits and prevent them from happening again?

Are these 3 Failure Audits a serious threat to my computer?

Can someone please help me correct these errors. I am NOT a computer expert
so for me to understand your generous help and advice, please do not use
technical computer language and acronymes.

I am very grateful for any help and advice you generous people out there are
willing to give me!!! :-) :-)

THANK YOU,

Techno Phobe.




In article , Fleabus
wrote:
I installed SP2 and have 1 problem I need help with.

I know zilch about networking/connectoids etc, so please excuse the
load of given info.

I simply used the bundled MS PPPOE to make the DSL connection to my
ISP as they suggested when I originally installed XP HE. SP1 also
worked fine.

With SP2 I now have a yellow flagged Local Area Connection icon in
systray.

l-click it and Local Area Connection Status dialog comes up.
On General tab, Status: Limited or no connectivity
Speed : 10Mbps
Activity: Sent/Received icon is yellow flagged.

Support tab: Connection status: Limited or no connectivity. You might
not be able to access the Internet or some network resources.
"This problem occurred because the network did not assign a network
address to the computer."
Details
Physical Address 00-E0-18-97-B7-3D
IP Address 169.254.53.78
Subnet Mask 255.255.0.0
Default Gateway
DNS Server
WINS Server
Repair button Fails at renewing IP address

r-click icon open Network Connections General tab
Connect using Intel PRO/100 VE Network Connection

Broadband:
Sympatico - Broadband Connected
LAN or High-Speed Internet:
1394 Connection - LAN or High-Speed Internet - Connected
Local Area Connection - Lan or High-Speed Internet - Limited or no
connectivity
(Yellow flagged)
r-click on Local Area Connection Properties General

List:
Client for Microsoft Networks
File and Printer Sharing for Microsoft Networks
Qos Packet Scheduler
Internet Protocol (TCP/IP)*

*Notify me when this connection has limited or no connectivity is
checked"

I should add that I use the on-board motherboard LAN (Asus P4T533-C
s478/i850e) to an Alcatel Speed Touch Home external ADSL modem. No
other computer and no router.
I also have 2 external HDDs. One is firewire, the other is USB2
At one point I had Bluetooth installed but successfully (I think)
removed it.

My DSL Ultra Service allows for up to 4 Mbps down/800 Mbps up
I'm 6 city blocks from the CO
I get at best 2600 down/325 up
Maybe there has been a problem all along but wasn't reported until
now.

Can you help me straighten this up?

Thanks in advance,

Fleabus ..............

Please remove the X from my address to e-mail me.

Are you able to access the Internet on that computer? If so, there's
nothing wrong, and you can un-check "Notify me when this connection
has limited or no connectivity" on the LAN connection to make the
message go away.

When XP uses a DSL service with PPPoE, it creates a logical PPPoE
network connection that communicates with your ISP and receives an IP
address. It's a "logical" connection because it doesn't correspond to
a physical (hardware) network adapter.

The physical (hardware) network adapter on your computer is the
on-board motherboard LAN adapter. The message that you're seeing
occurs because the LAN connection that corresponds to that adapter
doesn't receive an IP address from your ISP, which is normal with
PPPoE.
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com




Hi

I'm having what seems to be a familair problem with Task Manager,
Regedit etc.

I've updated my AVG definitions, scanned in safe mode and normal, run
a couple of the suggested online scanners, run Spybot and Spyware
Doctor. And (!) I've tried Doug's various utilities (Security Console
and XP_taskmgrenab included) and I Task Manager is still greyed out. I
can however run everything when I boot in Safe Mode.

So I've used Doug's Program Tracker and I'm hoping someone can help me
decipher what the heck is going on.

Many thanks in advance and please don't tell me to run a virus
check!!!!

-- Registry --
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurr entVersionRunOnce

No Items Found

-- Registry --
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurr entVersionRun

IgfxTray C:WINDOWSSystem32igfxtray.exe
HotKeysCmds C:WINDOWSSystem32hkcmd.exe
Apoint C:Program FilesApointApoint.exe
Dell QuickSet C:Program
FilesDellQuickSetquickset.exe
bascstray BascsTray.exe
DVDSentry C:WINDOWSSystem32DSentry.exe
AVG_CC C:PROGRA~1GrisoftAVG6avgcc32.exe
/STARTUP
vptray C:Program FilesNavNTvptray.exe
QuickTime Task "C:Program FilesQuickTimeqttask.exe"
-atboottime
Openwares LiveUpdate C:Program
FilesLiveUpdateLiveUpdate.exe
RoxioEngineUtility "C:Program FilesCommon FilesRoxio
SharedSystemEngUtil.exe"
RoxioAudioCentral "C:Program FilesRoxioEasy CD Creator
6AudioCentralRxMon.exe"
GSICONEXE gsicon.exe
DSLAGENTEXE dslagent.exe USB
MMTray C:Program FilesMUSICMATCHMUSICMATCH
Jukeboxmm_tray.exe
mmtask C:Program FilesMUSICMATCHMUSICMATCH
Jukeboxmmtask.exe
SmcService C:PROGRA~1SygateSPFsmc.exe -startgui

-- Registry --
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurre ntVersionRunOnce

No Items Found

-- Registry --
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurre ntVersionRun

H/PC Connection Agent "C:Program FilesMicrosoft
ActiveSyncWCESCOMM.EXE"
Creative Detector C:Program
FilesCreativeMediaSourceDetectorCTDetect.exe /R
SpySweeper "C:Program FilesWebrootSpy
SweeperSpySweeper.exe" /0
ctfmon.exe C:WINDOWSsystem32ctfmon.exe

-- Registry --
HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCur rentVersionRunOnce

No Items Found

-- Start Menu - Current User --
DESKTOP.INI

-- Start Menu - All Users --
Acrobat Assistant.lnk
BTTray.lnk
Dataviz Messenger.lnk
DESKTOP.INI
Microsoft Office OneNote 2003 Quick Launch.lnk
Phone Connection Monitor.lnk
Service Manager.lnk

-- Disabled Items --
No Items Found

-- Registry - Shell Value - HKLMSOFTWAREMicrosoftWindows
NTCurrentVersionWinlogon --
Explorer.exe

-- Running Processes --
System Idle Process
System
smss.exe SystemRootSystem32smss.exe
csrss.exe C:WINDOWSsystem32csrss.exe
ObjectDirectory=Windows SharedSection=1024,3072,512 Windows=On
SubSystemType=Windows ServerDll=basesrv,1
ServerDll=winsrv:UserServerDllInitialization,3
ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off
MaxRequestThreads=16
winlogon.exe winlogon.exe
services.exe C:WINDOWSsystem32services.exe
lsass.exe C:WINDOWSsystem32lsass.exe
svchost.exe C:WINDOWSsystem32svchost -k DcomLaunch
svchost.exe C:WINDOWSsystem32svchost -k rpcss
svchost.exe C:WINDOWSSystem32svchost.exe -k netsvcs
Smc.exe "C:Program FilesSygateSPFsmc.exe"
svchost.exe C:WINDOWSSystem32svchost.exe -k NetworkService
svchost.exe C:WINDOWSSystem32svchost.exe -k LocalService
spoolsv.exe C:WINDOWSsystem32spoolsv.exe
scardsvr.exe C:WINDOWSSystem32SCardSvr.exe
avgserv.exe C:PROGRA~1GrisoftAVG6avgserv.exe
BAsfIpM.exe C:WINDOWSSystem32basfipm.exe
btwdins.exe "C:Program FilesDellBluetooth
Softwarebinbtwdins.exe"
cisvc.exe C:WINDOWSsystem32cisvc.exe
CTSVCCDA.EXE C:WINDOWSSystem32CTsvcCDA.EXE
defwatch.exe "C:Program FilesNavNTdefwatch.exe"
inetinfo.exe C:WINDOWSSystem32inetsrvinetinfo.exe
sqlservr.exe C:PROGRA~1MICROS~4MSSQLbinnsqlservr.exe
rtvscan.exe "C:Program FilesNavNTrtvscan.exe"
svchost.exe C:WINDOWSSystem32svchost.exe -k imgsvc
wdfmgr.exe C:WINDOWSsystem32wdfmgr.exe
WLTRYSVC.EXE C:WINDOWSSystem32WLTRYSVC.EXE
C:WINDOWSSystem32bcmwltry.exe
MsPMSPSv.exe C:WINDOWSSystem32MsPMSPSv.exe
BCMWLTRY.EXE C:WINDOWSSystem32bcmwltry.exe
alg.exe C:WINDOWSSystem32alg.exe
explorer.exe C:WINDOWSExplorer.EXE
REGSVR.EXE C:WINDOWSREGSVR.EXE
hkcmd.exe "C:WINDOWSSystem32hkcmd.exe"
Apoint.exe "C:Program FilesApointApoint.exe"
quickset.exe "C:Program FilesDellQuickSetquickset.exe"
DSentry.exe "C:WINDOWSSystem32DSentry.exe"
avgcc32.exe "C:PROGRA~1GrisoftAVG6avgcc32.exe" /STARTUP
ApntEx.exe "Apntex.exe"
vptray.exe "C:Program FilesNavNTvptray.exe"
RxMon.exe "C:Program FilesRoxioEasy CD Creator
6AudioCentralRxMon.exe"
gsicon.exe "C:WINDOWSsystem32gsicon.exe"
dslagent.exe "C:WINDOWSsystem32dslagent.exe" USB
mm_tray.exe "C:Program FilesMUSICMATCHMUSICMATCH
Jukeboxmm_tray.exe"
mmtask.exe "C:Program FilesMUSICMATCHMUSICMATCH
Jukeboxmmtask.exe"
wcescomm.exe "C:Program FilesMicrosoft
ActiveSyncWCESCOMM.EXE"
CTDetect.exe "C:Program
FilesCreativeMediaSourceDetectorCTDetect.exe" /R
SpySweeper.exe "C:Program FilesWebrootSpy
SweeperSpySweeper.exe" /0
ctfmon.exe "C:WINDOWSsystem32ctfmon.exe"
Playlist.exe "C:Program FilesRoxioEasy CD Creator
6AudioCentralPlaylist.exe" -Embedding
acrotray.exe "C:Program FilesAdobeAcrobat
6.0Distillracrotray.exe"
BTTray.exe "C:Program FilesDellBluetooth
SoftwareBTTray.exe"
DvzMsgr.exe "C:WINDOWSDvzCommonDvzMsgr.exe"
audevicemgr.exe "C:Program FilesSony
EricssonMobileaudevicemgr.exe"
sqlmangr.exe "C:Program FilesMicrosoft SQL
Server80ToolsBinnsqlmangr.exe" /n
MROUTE~2.EXE c:PROGRA~1INTUWA~1SharedMROUTE~1MROUTE~2.EXE
-Embedding
BTStackServer.exe C:PROGRA~1DellBLUETO~1BTSTAC~1.EXE -Embedding
CONNMN~1.EXE C:PROGRA~1SONYER~1MobileCONNEC~1CONNMN~1.EXE
-Embedding
OUTLOOK.EXE "C:Program FilesMicrosoft
OfficeOFFICE11OUTLOOK.EXE" /recycle
SYNCIN~1.EXE C:PROGRA~1SONYER~1MobileSYNCIN~1.EXE
-Embedding
CIDAEMON.EXE "cidaemon.exe" DownLevelDaemon "c:system volume
informationcatalog.wci" 196672l 1616l
CIDAEMON.EXE "cidaemon.exe" DownLevelDaemon "c:documents and
settingsall usersapplication datamicrosoftvisiocatalog.wci"
196672l 1616l
CIDAEMON.EXE "cidaemon.exe" DownLevelDaemon
"c:inetpubcatalog.wci" 196672l 1616l
wuauclt.exe "C:WINDOWSsystem32wuauclt.exe"
iexplore.exe "C:Program FilesInternet Exploreriexplore.exe"
WINZIP32.EXE "C:PROGRA~1WINZIPwinzip32.exe" "C:Documents
and Settingsjamie.UK0DesktopStartupTracker3.zip"
StartupTracker3.exe "c:TEMPStartupTracker3.exe"
wmiprvse.exe C:WINDOWSSystem32wbemwmiprvse.exe

-- Running Services --

Name: ALG
Description: Provides support for 3rd party protocol plug-ins for
Internet Connection Sharing and the Windows Firewall.
Startup Mode: Manual
Run from: C:WINDOWSSystem32alg.exe

Name: AudioSrv
Description: Manages audio devices for Windows-based programs. If this
service is stopped, audio devices and effects will not function
properly. If this service is disabled, any services that explicitly
depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: AvgServ
Description:
Startup Mode: Auto
Run from: C:PROGRA~1GrisoftAVG6avgserv.exe

Name: BAsfIpM
Description: IP monitoring service for Broadcom ASF applications.
Startup Mode: Auto
Run from: C:WINDOWSSystem32basfipm.exe

Name: BITS
Description: Transfers files in the background using idle network
bandwidth. If the service is stopped, features such as Windows Update,
and MSN Explorer will be unable to automatically download programs and
other information. If this service is disabled, any services that
explicitly depend on it may fail to transfer files if they do not have
a fail safe mechanism to transfer files directly through IE in case
BITS has been disabled.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: Browser
Description: Maintains an updated list of computers on the network and
supplies this list to computers designated as browsers. If this
service is stopped, this list will not be updated or maintained. If
this service is disabled, any services that explicitly depend on it
will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: btwdins
Description:
Startup Mode: Auto
Run from: C:Program FilesDellBluetooth Softwarebinbtwdins.exe

Name: CiSvc
Description: Indexes contents and properties of files on local and
remote computers; provides rapid access to files through flexible
querying language.
Startup Mode: Auto
Run from: C:WINDOWSsystem32cisvc.exe

Name: Creative Service for CDROM Access
Description:
Startup Mode: Auto
Run from: C:WINDOWSSystem32CTsvcCDA.EXE

Name: CryptSvc
Description: Provides three management services: Catalog Database
Service, which confirms the signatures of Windows files; Protected
Root Service, which adds and removes Trusted Root Certification
Authority certificates from this computer; and Key Service, which
helps enroll this computer for certificates. If this service is
stopped, these management services will not function properly. If this
service is disabled, any services that explicitly depend on it will
fail to start.
Startup Mode: Auto
Run from: C:WINDOWSsystem32svchost.exe -k netsvcs

Name: DcomLaunch
Description: Provides launch functionality for DCOM services.
Startup Mode: Auto
Run from: C:WINDOWSsystem32svchost -k DcomLaunch

Name: DefWatch
Description:
Startup Mode: Auto
Run from: C:Program FilesNavNTdefwatch.exe

Name: Dhcp
Description: Manages network configuration by registering and updating
IP addresses and DNS names.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: dmserver
Description: Detects and monitors new hard disk drives and sends disk
volume information to Logical Disk Manager Administrative Service for
configuration. If this service is stopped, dynamic disk status and
configuration information may become out of date. If this service is
disabled, any services that explicitly depend on it will fail to
start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: Dnscache
Description: Resolves and caches Domain Name System (DNS) names for
this computer. If this service is stopped, this computer will not be
able to resolve DNS names and locate Active Directory domain
controllers. If this service is disabled, any services that explicitly
depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k NetworkService

Name: ERSvc
Description: Allows error reporting for services and applictions
running in non-standard environments.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: Eventlog
Description: Enables event log messages issued by Windows-based
programs and components to be viewed in Event Viewer. This service
cannot be stopped.
Startup Mode: Auto
Run from: C:WINDOWSsystem32services.exe

Name: EventSystem
Description: Supports System Event Notification Service (SENS), which
provides automatic distribution of events to subscribing Component
Object Model (COM) components. If the service is stopped, SENS will
close and will not be able to provide logon and logoff notifications.
If this service is disabled, any services that explicitly depend on it
will fail to start.
Startup Mode: Manual
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: helpsvc
Description: Enables Help and Support Center to run on this computer.
If this service is stopped, Help and Support Center will be
unavailable. If this service is disabled, any services that explicitly
depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: HidServ
Description: Enables generic input access to Human Interface Devices
(HID), which activates and maintains the use of predefined hot buttons
on keyboards, remote controls, and other multimedia devices. If this
service is stopped, hot buttons controlled by this service will no
longer function. If this service is disabled, any services that
explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: IISADMIN
Description: Allows administration of Web and FTP services through the
Internet Information Services snap-in
Startup Mode: Auto
Run from: C:WINDOWSSystem32inetsrvinetinfo.exe

Name: Irmon
Description: Supports infrared devices installed on the computer and
detects other devices that are in range.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: lanmanserver
Description: Supports file, print, and named-pipe sharing over the
network for this computer. If this service is stopped, these functions
will be unavailable. If this service is disabled, any services that
explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: LanmanWorkstation
Description: Creates and maintains client network connections to
remote servers. If this service is stopped, these connections will be
unavailable. If this service is disabled, any services that explicitly
depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: LmHosts
Description: Enables support for NetBIOS over TCP/IP (NetBT) service
and NetBIOS name resolution.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k LocalService

Name: MSSQLSERVER
Description:
Startup Mode: Auto
Run from: C:PROGRA~1MICROS~4MSSQLbinnsqlservr.exe

Name: Netlogon
Description: Supports pass-through authentication of account logon
events for computers in a domain.
Startup Mode: Auto
Run from: C:WINDOWSSystem32lsass.exe

Name: Netman
Description: Manages objects in the Network and Dial-Up Connections
folder, in which you can view both local area network and remote
connections.
Startup Mode: Manual
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: Nla
Description: Collects and stores network configuration and location
information, and notifies applications when this information changes.
Startup Mode: Manual
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: Norton AntiVirus Server
Description:
Startup Mode: Auto
Run from: C:Program FilesNavNTrtvscan.exe

Name: PlugPlay
Description: Enables a computer to recognize and adapt to hardware
changes with little or no user input. Stopping or disabling this
service will result in system instability.
Startup Mode: Auto
Run from: C:WINDOWSsystem32services.exe

Name: ProtectedStorage
Description: Provides protected storage for sensitive data, such as
private keys, to prevent access by unauthorized services, processes,
or users.
Startup Mode: Auto
Run from: C:WINDOWSsystem32lsass.exe

Name: RasMan
Description: Creates a network connection.
Startup Mode: Manual
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: RemoteRegistry
Description: Enables remote users to modify registry settings on this
computer. If this service is stopped, the registry can be modified
only by users on this computer. If this service is disabled, any
services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSsystem32svchost.exe -k LocalService

Name: RpcSs
Description: Provides the endpoint mapper and other miscellaneous RPC
services.
Startup Mode: Auto
Run from: C:WINDOWSsystem32svchost -k rpcss

Name: SamSs
Description: Stores security information for local user accounts.
Startup Mode: Auto
Run from: C:WINDOWSsystem32lsass.exe

Name: SCardSvr
Description: Manages access to smart cards read by this computer. If
this service is stopped, this computer will be unable to read smart
cards. If this service is disabled, any services that explicitly
depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32SCardSvr.exe

Name: Schedule
Description: Enables a user to configure and schedule automated tasks
on this computer. If this service is stopped, these tasks will not be
run at their scheduled times. If this service is disabled, any
services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: seclogon
Description: Enables starting processes under alternate credentials.
If this service is stopped, this type of logon access will be
unavailable. If this service is disabled, any services that explicitly
depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: SENS
Description: Tracks system events such as Windows logon, network, and
power events. Notifies COM+ Event System subscribers of these events.
Startup Mode: Auto
Run from: C:WINDOWSsystem32svchost.exe -k netsvcs

Name: SharedAccess
Description: Provides network address translation, addressing, name
resolution and/or intrusion prevention services for a home or small
office network.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: ShellHWDetection
Description:
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: SmcService
Description:
Startup Mode: Auto
Run from: C:Program FilesSygateSPFsmc.exe

Name: SMTPSVC
Description: Transports electronic mail across the network
Startup Mode: Auto
Run from: C:WINDOWSSystem32inetsrvinetinfo.exe

Name: Spooler
Description: Loads files to memory for later printing.
Startup Mode: Auto
Run from: C:WINDOWSsystem32spoolsv.exe

Name: SSDPSRV
Description: Enables discovery of UPnP devices on your home network.
Startup Mode: Manual
Run from: C:WINDOWSSystem32svchost.exe -k LocalService

Name: stisvc
Description: Provides image acquisition services for scanners and
cameras.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k imgsvc

Name: TapiSrv
Description: Provides Telephony API (TAPI) support for programs that
control telephony devices and IP based voice connections on the local
computer and, through the LAN, on servers that are also running the
service.
Startup Mode: Manual
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: TermService
Description: Allows multiple users to be connected interactively to a
machine as well as the display of desktops and applications to remote
computers. The underpinning of Remote Desktop (including RD for
Administrators), Fast User Switching, Remote Assistance, and Terminal
Server.
Startup Mode: Manual
Run from: C:WINDOWSSystem32svchost -k DComLaunch

Name: Themes
Description: Provides user experience theme management.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: TrkWks
Description: Maintains links between NTFS files within a computer or
across computers in a network domain.
Startup Mode: Auto
Run from: C:WINDOWSsystem32svchost.exe -k netsvcs

Name: UMWdf
Description: Enables Windows user mode drivers.
Startup Mode: Auto
Run from: C:WINDOWSsystem32wdfmgr.exe

Name: w32time
Description: Maintains date and time synchronization on all clients
and servers in the network. If this service is stopped, date and time
synchronization will be unavailable. If this service is disabled, any
services that explicitly depend on it will fail to start.

Startup Mode: Auto
Run from: C:WINDOWSsystem32svchost.exe -k netsvcs

Name: W3SVC
Description: Provides Web connectivity and administration through the
Internet Information Services snap-in
Startup Mode: Auto
Run from: C:WINDOWSSystem32inetsrvinetinfo.exe

Name: WebClient
Description: Enables Windows-based programs to create, access, and
modify Internet-based files. If this service is stopped, these
functions will not be available. If this service is disabled, any
services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k LocalService

Name: winmgmt
Description: Provides a common interface and object model to access
management information about operating system, devices, applications
and services. If this service is stopped, most Windows-based software
will not function properly. If this service is disabled, any services
that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSsystem32svchost.exe -k netsvcs

Name: WLTRYSVC
Description:
Startup Mode: Auto
Run from: C:WINDOWSSystem32WLTRYSVC.EXE
C:WINDOWSSystem32bcmwltry.exe

Name: WMDM PMSP Service
Description:
Startup Mode: Auto
Run from: C:WINDOWSSystem32MsPMSPSv.exe

Name: wuauserv
Description: Enables the download and installation of critical Windows
updates. If the service is disabled, the operating system can be
manually updated at the Windows Update Web site.
Startup Mode: Auto
Run from: C:WINDOWSsystem32svchost.exe -k netsvcs

Name: WZCSVC
Description: Provides automatic configuration for the 802.11 adapters
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs




"Mark Turnbull1" wrote:
Sorry to follow up my own message, but it was much worse than
I thought.
IE and Explorer both screwed up, the update some how managed
to switch
off System Restore.

So the only way was a clean install followed by Windows update
before
installing everything else. That worked! Good Job I did
backup before
installing SP2.

In message , Mark
Turnbull
writes
I have just installed SP2 on my machine (AMD Athlon 2200
running XP
Pro) and now it takes for ever to start-up. It starts then
get to the
wallpaper then sits there for what seems an eternity
(probably abut 5
mins), eventually you get some Icon that are blank then after
about 15
minutes some start to refresh. The task bar is not available
during
this time.

By going through a process of elimination with Msconfig I
have
identified that all is well if I disable the Shell Hardware
Detect
service. Anybody seen this or got any ideas?

I suspect this was a problem before SP2 as it has for
sometime been
slow to boot but not that slow!

--
Mark Turnbull

Hi Mark. I have been trying to resolve this same problem on a computer
for a friend. What Ive found so far is that it is caused by an ATAPI
time-out. If yours is the same, you will see in the event viewer that
at the time of the prolonged boot-up there are several of these ATAPI
timeouts. From what Ive found so far, it appears that SP2 is much
more aggressive in the timeout setting, so an ATAPI interface that was
ok before SP2 fails with SP2. The fault could be a CD drive that takes
a long time to respond or to the motherboard ATAPI interface. The next
stage in my investigation will be to try booting without the cd
drives connected. A further effect of this error is that after several
failed attempts to communicate with the cd drive, Windows changes the
drive mode from DMA to PIO.

--
http://www.WindowsForumz.com/ This article was posted by author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.WindowsForumz.com/Hardwar...ict163822.html
Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.WindowsForumz.com/eform.php?p=519595




It's nice that Microsoft is thinking about the issues,
but has anyone read the first article? It lists just
about every piece of software known to man and provides
NO DETAILS. Very helpful, MS.

-----Original Message-----

Programs That May Behave Differently in Windows XP
Service Pack 2

http://support.microsoft.com/default.aspx?scid=kb;en-
us;884130

Some Programs Seem to Stop Working After You Install
Windows XP Service Pack
2

http://support.microsoft.com/default.aspx?kbid=842242

Troubleshooting Windows Firewall Settings in Windows XP
Service Pack 2

http://support.microsoft.com/default.aspx?kbid=875357

How to troubleshoot problems accessing secure Web pages
with Internet
Explorer 6 Service Pack 2

http://support.microsoft.com/default.aspx?scid=kb;EN-
US;870700

You receive a "Data Execution Prevention" error message
in Windows XP
Service Pack 2

http://support.microsoft.com/default.aspx?
kbid=875351#appliesto

8/12/2004 873182 You receive an "Application is
terminating" error message
when you view the Quicken Deluxe 2001 privacy statement
on a computer that
is running Windows XP Service Pack 2
(873182) - Describes a problem where you receive
an "Abnormal program
termination" error message when you run Quicken Deluxe
2001 on a Windows XP
SP2-based computer.

8/12/2004 842844 How to install Windows XP Service
Pack 2 (SP2) by using
Systems Management Server
(842844) - Describes how to use Systems Management
Server to deploy Windows
XP Service Pack 2 to your Windows XP clients.

8/12/2004 297942 Service redirection does not apply to
Internet Connection
Firewall
(297942) - In Windows XP, the Internet Connection
Firewall (ICF) (called
Windows Firewall (WF) in Windows XP Service Pack 2
(SP2)) and Internet
Connection Sharing (ICS) features share a common
interface for configuring
services to which Internet users can gain...

8/12/2004 841375 A message stating that an instance of
SQL Server is
vulnerable to virus attacks is logged in the application
event log when you
install SQL Server 2000 or MSDE 2000 on a computer that
is running Windows
XP Service Pack 2
(841375) - When you install SQL Server 2000 SP2 or MSDE
2000 SP2 or earlier
versions on computers that are running Windows XP SP2,
you must install the
latest SQL Server 2000 service pack or the latest MSDE
2000 service pack to
help protect your computer.

8/12/2004 842907 SQL Server CE client programs may not
be able to connect
to IIS on computers that are running Windows XP SP2
(842907) - Describes a problem that may occur when your
SQL Server CE client
program may not be able to connect to IIS on computers
that are running
Windows XP SP2. Includes a resolution for the problem.

8/7/2004 841893 The Enterprise Single Sign-On Service
and associated
BizTalk Server 2004 services fail after you install
Windows XP Service Pack
2 (SP2)
(841893) - Explains why you cannot start the Enterprise
Single Sign-On
Service or the BizTalk Server Application Service after
you install Windows
XP Service Pack 2 (SP2) on a computer that is running
BizTalk Server 2004.

8/13/2004 841549 How to enable ports on Windows XP SP2
for Analysis
Services and SQL Server 7.0 OLAP Services
(841549) - Describes how to configure Windows Firewall
in Windows XP SP2 to
permit SQL Server 2000 Analysis Services or SQL Server
7.0 OLAP Services to
communicate by using the network.

8/12/2004 841624 The SMS Administrator console cannot
display Windows
Event Viewer, Windows Diagnostics or Windows Performance
Monitor for Windows
XP Service Pack 2 clients
(841624) - Describes an issue where you cannot use the
SMS Administrator
console to view some Windows XP Professional SP2 tools.

8/13/2004 837651 USB audio/video devices do not resume
from standby on
some portable computers
(837651) - Describes a problem that occurs on some
portable computer
systems. Some systems do not resume from standby or from
hybernate when a
USB kernel streaming device is installed. Problem is
resolved in Windows XP
SP2. Visit the Windows Update Web site.

8/13/2004 839278 BUG: The changes in a remote
subscriber are not updated
to the publisher for a queued updating replication that
uses Message Queuing
on a computer that is running Windows XP Service Pack 2
(839278) - After installing Windows XP SP2, the changes
that are made in a
remote subscriber are not updated to the publisher if
Message Queuing is
used for the queued updating publication. This article
discusses a
workaround that resolves this problem.

8/13/2004 839018 The NET SEND command may not work
correctly on a computer
that is running Windows XP Service Pack 2
(839018) - By default, the NET SEND command fails when
either the source or
the destination computer is running Windows XP Service
Pack 2 (SP2). This
article discusses a workaround for this problem.

13) 8/12/2004 833977 How to turn on remote debugging in
Windows XP Service
Pack 2
(833977) - This step-by-step article describes how to
turn on remote
debugging with the new Internet Connection Firewall
(ICF) for Microsoft
Windows XP Service Pack 2 (SP2). back to the top Turn on
remote debugging To
turn on remote debugging in Windows XP SP2,...

1 7/27/2004 818894 Changes to Increase the Number of
Open Files in Windows
2000 SP2 and Later
(818894) - This article describes a memory management
change that was
introduced in Windows 2000 Service Pack 2 (SP2) that
increases the
scalability and performance of Windows. This change is
included in all later
versions of Windows 2000, Microsoft Windows XP,...

8/13/2004 832860 Windows XP SP2 clients cannot use
Background Intelligent
Transfer Service to download files from SMS 2003

(832860) - After you upgrade your Microsoft Windows XP-
based client computer
to Windows XP Service Pack 2 (SP2), the Systems
Management Server (SMS) 2003
Advanced Client may not be able to download package
files when it uses
Background Intelligent Transfer...

8/11/2004 832490 Security enhancements in Microsoft
Windows XP Service
Pack 2
(832490) - With Microsoft Windows XP Service Pack 2
(SP2), Microsoft is
introducing a set of security technologies that will
help to improve Windows
XP-based computers' ability to withstand malicious
attacks from viruses and
worms. The technologies enhance the...

8/8/2004 321924 INFO: MSXML 3.0 Service Pack 2
Installs Only in Replace
Mode
(321924) - Microsoft XML (MSXML) 3.0 Service Pack 2
(SP2), or later service
pack, installs only in replace mode. This release is
also included with
Microsoft Windows XP, Microsoft Internet Explorer 6.0,
and Microsoft Data
Access Components (MDAC) 2.7. Replace...

Chad Harris

.




Hi

I'm having what seems to be a familair problem with Task Manager,
Regedit etc.

I've updated my AVG definitions, scanned in safe mode and normal, run
a couple of the suggested online scanners, run Spybot and Spyware
Doctor. And (!) I've tried Doug's various utilities (Security Console
and XP_taskmgrenab included) and I Task Manager is still greyed out. I
can however run everything when I boot in Safe Mode.

So I've used Doug's Program Tracker and I'm hoping someone can help me
decipher what the heck is going on.

Many thanks in advance and please don't tell me to run a virus
check!!!!

-- Registry --
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurr entVersionRunOnce

No Items Found

-- Registry --
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurr entVersionRun

IgfxTray C:WINDOWSSystem32igfxtray.exe
HotKeysCmds C:WINDOWSSystem32hkcmd.exe
Apoint C:Program FilesApointApoint.exe
Dell QuickSet C:Program
FilesDellQuickSetquickset.exe
bascstray BascsTray.exe
DVDSentry C:WINDOWSSystem32DSentry.exe
AVG_CC C:PROGRA~1GrisoftAVG6avgcc32.exe
/STARTUP
vptray C:Program FilesNavNTvptray.exe
QuickTime Task "C:Program FilesQuickTimeqttask.exe"
-atboottime
Openwares LiveUpdate C:Program
FilesLiveUpdateLiveUpdate.exe
RoxioEngineUtility "C:Program FilesCommon FilesRoxio
SharedSystemEngUtil.exe"
RoxioAudioCentral "C:Program FilesRoxioEasy CD Creator
6AudioCentralRxMon.exe"
GSICONEXE gsicon.exe
DSLAGENTEXE dslagent.exe USB
MMTray C:Program FilesMUSICMATCHMUSICMATCH
Jukeboxmm_tray.exe
mmtask C:Program FilesMUSICMATCHMUSICMATCH
Jukeboxmmtask.exe
SmcService C:PROGRA~1SygateSPFsmc.exe -startgui

-- Registry --
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurre ntVersionRunOnce

No Items Found

-- Registry --
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurre ntVersionRun

H/PC Connection Agent "C:Program FilesMicrosoft
ActiveSyncWCESCOMM.EXE"
Creative Detector C:Program
FilesCreativeMediaSourceDetectorCTDetect.exe /R
SpySweeper "C:Program FilesWebrootSpy
SweeperSpySweeper.exe" /0
ctfmon.exe C:WINDOWSsystem32ctfmon.exe

-- Registry --
HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCur rentVersionRunOnce

No Items Found

-- Start Menu - Current User --
DESKTOP.INI

-- Start Menu - All Users --
Acrobat Assistant.lnk
BTTray.lnk
Dataviz Messenger.lnk
DESKTOP.INI
Microsoft Office OneNote 2003 Quick Launch.lnk
Phone Connection Monitor.lnk
Service Manager.lnk

-- Disabled Items --
No Items Found

-- Registry - Shell Value - HKLMSOFTWAREMicrosoftWindows
NTCurrentVersionWinlogon --
Explorer.exe

-- Running Processes --
System Idle Process
System
smss.exe SystemRootSystem32smss.exe
csrss.exe C:WINDOWSsystem32csrss.exe
ObjectDirectory=Windows SharedSection=1024,3072,512 Windows=On
SubSystemType=Windows ServerDll=basesrv,1
ServerDll=winsrv:UserServerDllInitialization,3
ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off
MaxRequestThreads=16
winlogon.exe winlogon.exe
services.exe C:WINDOWSsystem32services.exe
lsass.exe C:WINDOWSsystem32lsass.exe
svchost.exe C:WINDOWSsystem32svchost -k DcomLaunch
svchost.exe C:WINDOWSsystem32svchost -k rpcss
svchost.exe C:WINDOWSSystem32svchost.exe -k netsvcs
Smc.exe "C:Program FilesSygateSPFsmc.exe"
svchost.exe C:WINDOWSSystem32svchost.exe -k NetworkService
svchost.exe C:WINDOWSSystem32svchost.exe -k LocalService
spoolsv.exe C:WINDOWSsystem32spoolsv.exe
scardsvr.exe C:WINDOWSSystem32SCardSvr.exe
avgserv.exe C:PROGRA~1GrisoftAVG6avgserv.exe
BAsfIpM.exe C:WINDOWSSystem32basfipm.exe
btwdins.exe "C:Program FilesDellBluetooth
Softwarebinbtwdins.exe"
cisvc.exe C:WINDOWSsystem32cisvc.exe
CTSVCCDA.EXE C:WINDOWSSystem32CTsvcCDA.EXE
defwatch.exe "C:Program FilesNavNTdefwatch.exe"
inetinfo.exe C:WINDOWSSystem32inetsrvinetinfo.exe
sqlservr.exe C:PROGRA~1MICROS~4MSSQLbinnsqlservr.exe
rtvscan.exe "C:Program FilesNavNTrtvscan.exe"
svchost.exe C:WINDOWSSystem32svchost.exe -k imgsvc
wdfmgr.exe C:WINDOWSsystem32wdfmgr.exe
WLTRYSVC.EXE C:WINDOWSSystem32WLTRYSVC.EXE
C:WINDOWSSystem32bcmwltry.exe
MsPMSPSv.exe C:WINDOWSSystem32MsPMSPSv.exe
BCMWLTRY.EXE C:WINDOWSSystem32bcmwltry.exe
alg.exe C:WINDOWSSystem32alg.exe
explorer.exe C:WINDOWSExplorer.EXE
REGSVR.EXE C:WINDOWSREGSVR.EXE
hkcmd.exe "C:WINDOWSSystem32hkcmd.exe"
Apoint.exe "C:Program FilesApointApoint.exe"
quickset.exe "C:Program FilesDellQuickSetquickset.exe"
DSentry.exe "C:WINDOWSSystem32DSentry.exe"
avgcc32.exe "C:PROGRA~1GrisoftAVG6avgcc32.exe" /STARTUP
ApntEx.exe "Apntex.exe"
vptray.exe "C:Program FilesNavNTvptray.exe"
RxMon.exe "C:Program FilesRoxioEasy CD Creator
6AudioCentralRxMon.exe"
gsicon.exe "C:WINDOWSsystem32gsicon.exe"
dslagent.exe "C:WINDOWSsystem32dslagent.exe" USB
mm_tray.exe "C:Program FilesMUSICMATCHMUSICMATCH
Jukeboxmm_tray.exe"
mmtask.exe "C:Program FilesMUSICMATCHMUSICMATCH
Jukeboxmmtask.exe"
wcescomm.exe "C:Program FilesMicrosoft
ActiveSyncWCESCOMM.EXE"
CTDetect.exe "C:Program
FilesCreativeMediaSourceDetectorCTDetect.exe" /R
SpySweeper.exe "C:Program FilesWebrootSpy
SweeperSpySweeper.exe" /0
ctfmon.exe "C:WINDOWSsystem32ctfmon.exe"
Playlist.exe "C:Program FilesRoxioEasy CD Creator
6AudioCentralPlaylist.exe" -Embedding
acrotray.exe "C:Program FilesAdobeAcrobat
6.0Distillracrotray.exe"
BTTray.exe "C:Program FilesDellBluetooth
SoftwareBTTray.exe"
DvzMsgr.exe "C:WINDOWSDvzCommonDvzMsgr.exe"
audevicemgr.exe "C:Program FilesSony
EricssonMobileaudevicemgr.exe"
sqlmangr.exe "C:Program FilesMicrosoft SQL
Server80ToolsBinnsqlmangr.exe" /n
MROUTE~2.EXE c:PROGRA~1INTUWA~1SharedMROUTE~1MROUTE~2.EXE
-Embedding
BTStackServer.exe C:PROGRA~1DellBLUETO~1BTSTAC~1.EXE -Embedding
CONNMN~1.EXE C:PROGRA~1SONYER~1MobileCONNEC~1CONNMN~1.EXE
-Embedding
OUTLOOK.EXE "C:Program FilesMicrosoft
OfficeOFFICE11OUTLOOK.EXE" /recycle
SYNCIN~1.EXE C:PROGRA~1SONYER~1MobileSYNCIN~1.EXE
-Embedding
CIDAEMON.EXE "cidaemon.exe" DownLevelDaemon "c:system volume
informationcatalog.wci" 196672l 1616l
CIDAEMON.EXE "cidaemon.exe" DownLevelDaemon "c:documents and
settingsall usersapplication datamicrosoftvisiocatalog.wci"
196672l 1616l
CIDAEMON.EXE "cidaemon.exe" DownLevelDaemon
"c:inetpubcatalog.wci" 196672l 1616l
wuauclt.exe "C:WINDOWSsystem32wuauclt.exe"
iexplore.exe "C:Program FilesInternet Exploreriexplore.exe"
WINZIP32.EXE "C:PROGRA~1WINZIPwinzip32.exe" "C:Documents
and Settingsjamie.UK0DesktopStartupTracker3.zip"
StartupTracker3.exe "c:TEMPStartupTracker3.exe"
wmiprvse.exe C:WINDOWSSystem32wbemwmiprvse.exe

-- Running Services --

Name: ALG
Description: Provides support for 3rd party protocol plug-ins for
Internet Connection Sharing and the Windows Firewall.
Startup Mode: Manual
Run from: C:WINDOWSSystem32alg.exe

Name: AudioSrv
Description: Manages audio devices for Windows-based programs. If this
service is stopped, audio devices and effects will not function
properly. If this service is disabled, any services that explicitly
depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: AvgServ
Description:
Startup Mode: Auto
Run from: C:PROGRA~1GrisoftAVG6avgserv.exe

Name: BAsfIpM
Description: IP monitoring service for Broadcom ASF applications.
Startup Mode: Auto
Run from: C:WINDOWSSystem32basfipm.exe

Name: BITS
Description: Transfers files in the background using idle network
bandwidth. If the service is stopped, features such as Windows Update,
and MSN Explorer will be unable to automatically download programs and
other information. If this service is disabled, any services that
explicitly depend on it may fail to transfer files if they do not have
a fail safe mechanism to transfer files directly through IE in case
BITS has been disabled.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: Browser
Description: Maintains an updated list of computers on the network and
supplies this list to computers designated as browsers. If this
service is stopped, this list will not be updated or maintained. If
this service is disabled, any services that explicitly depend on it
will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: btwdins
Description:
Startup Mode: Auto
Run from: C:Program FilesDellBluetooth Softwarebinbtwdins.exe

Name: CiSvc
Description: Indexes contents and properties of files on local and
remote computers; provides rapid access to files through flexible
querying language.
Startup Mode: Auto
Run from: C:WINDOWSsystem32cisvc.exe

Name: Creative Service for CDROM Access
Description:
Startup Mode: Auto
Run from: C:WINDOWSSystem32CTsvcCDA.EXE

Name: CryptSvc
Description: Provides three management services: Catalog Database
Service, which confirms the signatures of Windows files; Protected
Root Service, which adds and removes Trusted Root Certification
Authority certificates from this computer; and Key Service, which
helps enroll this computer for certificates. If this service is
stopped, these management services will not function properly. If this
service is disabled, any services that explicitly depend on it will
fail to start.
Startup Mode: Auto
Run from: C:WINDOWSsystem32svchost.exe -k netsvcs

Name: DcomLaunch
Description: Provides launch functionality for DCOM services.
Startup Mode: Auto
Run from: C:WINDOWSsystem32svchost -k DcomLaunch

Name: DefWatch
Description:
Startup Mode: Auto
Run from: C:Program FilesNavNTdefwatch.exe

Name: Dhcp
Description: Manages network configuration by registering and updating
IP addresses and DNS names.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: dmserver
Description: Detects and monitors new hard disk drives and sends disk
volume information to Logical Disk Manager Administrative Service for
configuration. If this service is stopped, dynamic disk status and
configuration information may become out of date. If this service is
disabled, any services that explicitly depend on it will fail to
start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: Dnscache
Description: Resolves and caches Domain Name System (DNS) names for
this computer. If this service is stopped, this computer will not be
able to resolve DNS names and locate Active Directory domain
controllers. If this service is disabled, any services that explicitly
depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k NetworkService

Name: ERSvc
Description: Allows error reporting for services and applictions
running in non-standard environments.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: Eventlog
Description: Enables event log messages issued by Windows-based
programs and components to be viewed in Event Viewer. This service
cannot be stopped.
Startup Mode: Auto
Run from: C:WINDOWSsystem32services.exe

Name: EventSystem
Description: Supports System Event Notification Service (SENS), which
provides automatic distribution of events to subscribing Component
Object Model (COM) components. If the service is stopped, SENS will
close and will not be able to provide logon and logoff notifications.
If this service is disabled, any services that explicitly depend on it
will fail to start.
Startup Mode: Manual
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: helpsvc
Description: Enables Help and Support Center to run on this computer.
If this service is stopped, Help and Support Center will be
unavailable. If this service is disabled, any services that explicitly
depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: HidServ
Description: Enables generic input access to Human Interface Devices
(HID), which activates and maintains the use of predefined hot buttons
on keyboards, remote controls, and other multimedia devices. If this
service is stopped, hot buttons controlled by this service will no
longer function. If this service is disabled, any services that
explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: IISADMIN
Description: Allows administration of Web and FTP services through the
Internet Information Services snap-in
Startup Mode: Auto
Run from: C:WINDOWSSystem32inetsrvinetinfo.exe

Name: Irmon
Description: Supports infrared devices installed on the computer and
detects other devices that are in range.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: lanmanserver
Description: Supports file, print, and named-pipe sharing over the
network for this computer. If this service is stopped, these functions
will be unavailable. If this service is disabled, any services that
explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: LanmanWorkstation
Description: Creates and maintains client network connections to
remote servers. If this service is stopped, these connections will be
unavailable. If this service is disabled, any services that explicitly
depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: LmHosts
Description: Enables support for NetBIOS over TCP/IP (NetBT) service
and NetBIOS name resolution.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k LocalService

Name: MSSQLSERVER
Description:
Startup Mode: Auto
Run from: C:PROGRA~1MICROS~4MSSQLbinnsqlservr.exe

Name: Netlogon
Description: Supports pass-through authentication of account logon
events for computers in a domain.
Startup Mode: Auto
Run from: C:WINDOWSSystem32lsass.exe

Name: Netman
Description: Manages objects in the Network and Dial-Up Connections
folder, in which you can view both local area network and remote
connections.
Startup Mode: Manual
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: Nla
Description: Collects and stores network configuration and location
information, and notifies applications when this information changes.
Startup Mode: Manual
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: Norton AntiVirus Server
Description:
Startup Mode: Auto
Run from: C:Program FilesNavNTrtvscan.exe

Name: PlugPlay
Description: Enables a computer to recognize and adapt to hardware
changes with little or no user input. Stopping or disabling this
service will result in system instability.
Startup Mode: Auto
Run from: C:WINDOWSsystem32services.exe

Name: ProtectedStorage
Description: Provides protected storage for sensitive data, such as
private keys, to prevent access by unauthorized services, processes,
or users.
Startup Mode: Auto
Run from: C:WINDOWSsystem32lsass.exe

Name: RasMan
Description: Creates a network connection.
Startup Mode: Manual
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: RemoteRegistry
Description: Enables remote users to modify registry settings on this
computer. If this service is stopped, the registry can be modified
only by users on this computer. If this service is disabled, any
services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSsystem32svchost.exe -k LocalService

Name: RpcSs
Description: Provides the endpoint mapper and other miscellaneous RPC
services.
Startup Mode: Auto
Run from: C:WINDOWSsystem32svchost -k rpcss

Name: SamSs
Description: Stores security information for local user accounts.
Startup Mode: Auto
Run from: C:WINDOWSsystem32lsass.exe

Name: SCardSvr
Description: Manages access to smart cards read by this computer. If
this service is stopped, this computer will be unable to read smart
cards. If this service is disabled, any services that explicitly
depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32SCardSvr.exe

Name: Schedule
Description: Enables a user to configure and schedule automated tasks
on this computer. If this service is stopped, these tasks will not be
run at their scheduled times. If this service is disabled, any
services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: seclogon
Description: Enables starting processes under alternate credentials.
If this service is stopped, this type of logon access will be
unavailable. If this service is disabled, any services that explicitly
depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: SENS
Description: Tracks system events such as Windows logon, network, and
power events. Notifies COM+ Event System subscribers of these events.
Startup Mode: Auto
Run from: C:WINDOWSsystem32svchost.exe -k netsvcs

Name: SharedAccess
Description: Provides network address translation, addressing, name
resolution and/or intrusion prevention services for a home or small
office network.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: ShellHWDetection
Description:
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: SmcService
Description:
Startup Mode: Auto
Run from: C:Program FilesSygateSPFsmc.exe

Name: SMTPSVC
Description: Transports electronic mail across the network
Startup Mode: Auto
Run from: C:WINDOWSSystem32inetsrvinetinfo.exe

Name: Spooler
Description: Loads files to memory for later printing.
Startup Mode: Auto
Run from: C:WINDOWSsystem32spoolsv.exe

Name: SSDPSRV
Description: Enables discovery of UPnP devices on your home network.
Startup Mode: Manual
Run from: C:WINDOWSSystem32svchost.exe -k LocalService

Name: stisvc
Description: Provides image acquisition services for scanners and
cameras.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k imgsvc

Name: TapiSrv
Description: Provides Telephony API (TAPI) support for programs that
control telephony devices and IP based voice connections on the local
computer and, through the LAN, on servers that are also running the
service.
Startup Mode: Manual
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: TermService
Description: Allows multiple users to be connected interactively to a
machine as well as the display of desktops and applications to remote
computers. The underpinning of Remote Desktop (including RD for
Administrators), Fast User Switching, Remote Assistance, and Terminal
Server.
Startup Mode: Manual
Run from: C:WINDOWSSystem32svchost -k DComLaunch

Name: Themes
Description: Provides user experience theme management.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: TrkWks
Description: Maintains links between NTFS files within a computer or
across computers in a network domain.
Startup Mode: Auto
Run from: C:WINDOWSsystem32svchost.exe -k netsvcs

Name: UMWdf
Description: Enables Windows user mode drivers.
Startup Mode: Auto
Run from: C:WINDOWSsystem32wdfmgr.exe

Name: w32time
Description: Maintains date and time synchronization on all clients
and servers in the network. If this service is stopped, date and time
synchronization will be unavailable. If this service is disabled, any
services that explicitly depend on it will fail to start.

Startup Mode: Auto
Run from: C:WINDOWSsystem32svchost.exe -k netsvcs

Name: W3SVC
Description: Provides Web connectivity and administration through the
Internet Information Services snap-in
Startup Mode: Auto
Run from: C:WINDOWSSystem32inetsrvinetinfo.exe

Name: WebClient
Description: Enables Windows-based programs to create, access, and
modify Internet-based files. If this service is stopped, these
functions will not be available. If this service is disabled, any
services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k LocalService

Name: winmgmt
Description: Provides a common interface and object model to access
management information about operating system, devices, applications
and services. If this service is stopped, most Windows-based software
will not function properly. If this service is disabled, any services
that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSsystem32svchost.exe -k netsvcs

Name: WLTRYSVC
Description:
Startup Mode: Auto
Run from: C:WINDOWSSystem32WLTRYSVC.EXE
C:WINDOWSSystem32bcmwltry.exe

Name: WMDM PMSP Service
Description:
Startup Mode: Auto
Run from: C:WINDOWSSystem32MsPMSPSv.exe

Name: wuauserv
Description: Enables the download and installation of critical Windows
updates. If the service is disabled, the operating system can be
manually updated at the Windows Update Web site.
Startup Mode: Auto
Run from: C:WINDOWSsystem32svchost.exe -k netsvcs

Name: WZCSVC
Description: Provides automatic configuration for the 802.11 adapters
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs




Hi

I'm having what seems to be a familair problem with Task Manager,
Regedit etc.

I've updated my AVG definitions, scanned in safe mode and normal, run
a couple of the suggested online scanners, run Spybot and Spyware
Doctor. And (!) I've tried Doug's various utilities (Security Console
and XP_taskmgrenab included) and I Task Manager is still greyed out. I
can however run everything when I boot in Safe Mode.

So I've used Doug's Program Tracker and I'm hoping someone can help me
decipher what the heck is going on.

Many thanks in advance and please don't tell me to run a virus
check!!!!

-- Registry --
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurr entVersionRunOnce

No Items Found

-- Registry --
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurr entVersionRun

IgfxTray C:WINDOWSSystem32igfxtray.exe
HotKeysCmds C:WINDOWSSystem32hkcmd.exe
Apoint C:Program FilesApointApoint.exe
Dell QuickSet C:Program
FilesDellQuickSetquickset.exe
bascstray BascsTray.exe
DVDSentry C:WINDOWSSystem32DSentry.exe
AVG_CC C:PROGRA~1GrisoftAVG6avgcc32.exe
/STARTUP
vptray C:Program FilesNavNTvptray.exe
QuickTime Task "C:Program FilesQuickTimeqttask.exe"
-atboottime
Openwares LiveUpdate C:Program
FilesLiveUpdateLiveUpdate.exe
RoxioEngineUtility "C:Program FilesCommon FilesRoxio
SharedSystemEngUtil.exe"
RoxioAudioCentral "C:Program FilesRoxioEasy CD Creator
6AudioCentralRxMon.exe"
GSICONEXE gsicon.exe
DSLAGENTEXE dslagent.exe USB
MMTray C:Program FilesMUSICMATCHMUSICMATCH
Jukeboxmm_tray.exe
mmtask C:Program FilesMUSICMATCHMUSICMATCH
Jukeboxmmtask.exe
SmcService C:PROGRA~1SygateSPFsmc.exe -startgui

-- Registry --
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurre ntVersionRunOnce

No Items Found

-- Registry --
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurre ntVersionRun

H/PC Connection Agent "C:Program FilesMicrosoft
ActiveSyncWCESCOMM.EXE"
Creative Detector C:Program
FilesCreativeMediaSourceDetectorCTDetect.exe /R
SpySweeper "C:Program FilesWebrootSpy
SweeperSpySweeper.exe" /0
ctfmon.exe C:WINDOWSsystem32ctfmon.exe

-- Registry --
HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCur rentVersionRunOnce

No Items Found

-- Start Menu - Current User --
DESKTOP.INI

-- Start Menu - All Users --
Acrobat Assistant.lnk
BTTray.lnk
Dataviz Messenger.lnk
DESKTOP.INI
Microsoft Office OneNote 2003 Quick Launch.lnk
Phone Connection Monitor.lnk
Service Manager.lnk

-- Disabled Items --
No Items Found

-- Registry - Shell Value - HKLMSOFTWAREMicrosoftWindows
NTCurrentVersionWinlogon --
Explorer.exe

-- Running Processes --
System Idle Process
System
smss.exe SystemRootSystem32smss.exe
csrss.exe C:WINDOWSsystem32csrss.exe
ObjectDirectory=Windows SharedSection=1024,3072,512 Windows=On
SubSystemType=Windows ServerDll=basesrv,1
ServerDll=winsrv:UserServerDllInitialization,3
ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off
MaxRequestThreads=16
winlogon.exe winlogon.exe
services.exe C:WINDOWSsystem32services.exe
lsass.exe C:WINDOWSsystem32lsass.exe
svchost.exe C:WINDOWSsystem32svchost -k DcomLaunch
svchost.exe C:WINDOWSsystem32svchost -k rpcss
svchost.exe C:WINDOWSSystem32svchost.exe -k netsvcs
Smc.exe "C:Program FilesSygateSPFsmc.exe"
svchost.exe C:WINDOWSSystem32svchost.exe -k NetworkService
svchost.exe C:WINDOWSSystem32svchost.exe -k LocalService
spoolsv.exe C:WINDOWSsystem32spoolsv.exe
scardsvr.exe C:WINDOWSSystem32SCardSvr.exe
avgserv.exe C:PROGRA~1GrisoftAVG6avgserv.exe
BAsfIpM.exe C:WINDOWSSystem32basfipm.exe
btwdins.exe "C:Program FilesDellBluetooth
Softwarebinbtwdins.exe"
cisvc.exe C:WINDOWSsystem32cisvc.exe
CTSVCCDA.EXE C:WINDOWSSystem32CTsvcCDA.EXE
defwatch.exe "C:Program FilesNavNTdefwatch.exe"
inetinfo.exe C:WINDOWSSystem32inetsrvinetinfo.exe
sqlservr.exe C:PROGRA~1MICROS~4MSSQLbinnsqlservr.exe
rtvscan.exe "C:Program FilesNavNTrtvscan.exe"
svchost.exe C:WINDOWSSystem32svchost.exe -k imgsvc
wdfmgr.exe C:WINDOWSsystem32wdfmgr.exe
WLTRYSVC.EXE C:WINDOWSSystem32WLTRYSVC.EXE
C:WINDOWSSystem32bcmwltry.exe
MsPMSPSv.exe C:WINDOWSSystem32MsPMSPSv.exe
BCMWLTRY.EXE C:WINDOWSSystem32bcmwltry.exe
alg.exe C:WINDOWSSystem32alg.exe
explorer.exe C:WINDOWSExplorer.EXE
REGSVR.EXE C:WINDOWSREGSVR.EXE
hkcmd.exe "C:WINDOWSSystem32hkcmd.exe"
Apoint.exe "C:Program FilesApointApoint.exe"
quickset.exe "C:Program FilesDellQuickSetquickset.exe"
DSentry.exe "C:WINDOWSSystem32DSentry.exe"
avgcc32.exe "C:PROGRA~1GrisoftAVG6avgcc32.exe" /STARTUP
ApntEx.exe "Apntex.exe"
vptray.exe "C:Program FilesNavNTvptray.exe"
RxMon.exe "C:Program FilesRoxioEasy CD Creator
6AudioCentralRxMon.exe"
gsicon.exe "C:WINDOWSsystem32gsicon.exe"
dslagent.exe "C:WINDOWSsystem32dslagent.exe" USB
mm_tray.exe "C:Program FilesMUSICMATCHMUSICMATCH
Jukeboxmm_tray.exe"
mmtask.exe "C:Program FilesMUSICMATCHMUSICMATCH
Jukeboxmmtask.exe"
wcescomm.exe "C:Program FilesMicrosoft
ActiveSyncWCESCOMM.EXE"
CTDetect.exe "C:Program
FilesCreativeMediaSourceDetectorCTDetect.exe" /R
SpySweeper.exe "C:Program FilesWebrootSpy
SweeperSpySweeper.exe" /0
ctfmon.exe "C:WINDOWSsystem32ctfmon.exe"
Playlist.exe "C:Program FilesRoxioEasy CD Creator
6AudioCentralPlaylist.exe" -Embedding
acrotray.exe "C:Program FilesAdobeAcrobat
6.0Distillracrotray.exe"
BTTray.exe "C:Program FilesDellBluetooth
SoftwareBTTray.exe"
DvzMsgr.exe "C:WINDOWSDvzCommonDvzMsgr.exe"
audevicemgr.exe "C:Program FilesSony
EricssonMobileaudevicemgr.exe"
sqlmangr.exe "C:Program FilesMicrosoft SQL
Server80ToolsBinnsqlmangr.exe" /n
MROUTE~2.EXE c:PROGRA~1INTUWA~1SharedMROUTE~1MROUTE~2.EXE
-Embedding
BTStackServer.exe C:PROGRA~1DellBLUETO~1BTSTAC~1.EXE -Embedding
CONNMN~1.EXE C:PROGRA~1SONYER~1MobileCONNEC~1CONNMN~1.EXE
-Embedding
OUTLOOK.EXE "C:Program FilesMicrosoft
OfficeOFFICE11OUTLOOK.EXE" /recycle
SYNCIN~1.EXE C:PROGRA~1SONYER~1MobileSYNCIN~1.EXE
-Embedding
CIDAEMON.EXE "cidaemon.exe" DownLevelDaemon "c:system volume
informationcatalog.wci" 196672l 1616l
CIDAEMON.EXE "cidaemon.exe" DownLevelDaemon "c:documents and
settingsall usersapplication datamicrosoftvisiocatalog.wci"
196672l 1616l
CIDAEMON.EXE "cidaemon.exe" DownLevelDaemon
"c:inetpubcatalog.wci" 196672l 1616l
wuauclt.exe "C:WINDOWSsystem32wuauclt.exe"
iexplore.exe "C:Program FilesInternet Exploreriexplore.exe"
WINZIP32.EXE "C:PROGRA~1WINZIPwinzip32.exe" "C:Documents
and Settingsjamie.UK0DesktopStartupTracker3.zip"
StartupTracker3.exe "c:TEMPStartupTracker3.exe"
wmiprvse.exe C:WINDOWSSystem32wbemwmiprvse.exe

-- Running Services --

Name: ALG
Description: Provides support for 3rd party protocol plug-ins for
Internet Connection Sharing and the Windows Firewall.
Startup Mode: Manual
Run from: C:WINDOWSSystem32alg.exe

Name: AudioSrv
Description: Manages audio devices for Windows-based programs. If this
service is stopped, audio devices and effects will not function
properly. If this service is disabled, any services that explicitly
depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: AvgServ
Description:
Startup Mode: Auto
Run from: C:PROGRA~1GrisoftAVG6avgserv.exe

Name: BAsfIpM
Description: IP monitoring service for Broadcom ASF applications.
Startup Mode: Auto
Run from: C:WINDOWSSystem32basfipm.exe

Name: BITS
Description: Transfers files in the background using idle network
bandwidth. If the service is stopped, features such as Windows Update,
and MSN Explorer will be unable to automatically download programs and
other information. If this service is disabled, any services that
explicitly depend on it may fail to transfer files if they do not have
a fail safe mechanism to transfer files directly through IE in case
BITS has been disabled.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: Browser
Description: Maintains an updated list of computers on the network and
supplies this list to computers designated as browsers. If this
service is stopped, this list will not be updated or maintained. If
this service is disabled, any services that explicitly depend on it
will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: btwdins
Description:
Startup Mode: Auto
Run from: C:Program FilesDellBluetooth Softwarebinbtwdins.exe

Name: CiSvc
Description: Indexes contents and properties of files on local and
remote computers; provides rapid access to files through flexible
querying language.
Startup Mode: Auto
Run from: C:WINDOWSsystem32cisvc.exe

Name: Creative Service for CDROM Access
Description:
Startup Mode: Auto
Run from: C:WINDOWSSystem32CTsvcCDA.EXE

Name: CryptSvc
Description: Provides three management services: Catalog Database
Service, which confirms the signatures of Windows files; Protected
Root Service, which adds and removes Trusted Root Certification
Authority certificates from this computer; and Key Service, which
helps enroll this computer for certificates. If this service is
stopped, these management services will not function properly. If this
service is disabled, any services that explicitly depend on it will
fail to start.
Startup Mode: Auto
Run from: C:WINDOWSsystem32svchost.exe -k netsvcs

Name: DcomLaunch
Description: Provides launch functionality for DCOM services.
Startup Mode: Auto
Run from: C:WINDOWSsystem32svchost -k DcomLaunch

Name: DefWatch
Description:
Startup Mode: Auto
Run from: C:Program FilesNavNTdefwatch.exe

Name: Dhcp
Description: Manages network configuration by registering and updating
IP addresses and DNS names.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: dmserver
Description: Detects and monitors new hard disk drives and sends disk
volume information to Logical Disk Manager Administrative Service for
configuration. If this service is stopped, dynamic disk status and
configuration information may become out of date. If this service is
disabled, any services that explicitly depend on it will fail to
start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: Dnscache
Description: Resolves and caches Domain Name System (DNS) names for
this computer. If this service is stopped, this computer will not be
able to resolve DNS names and locate Active Directory domain
controllers. If this service is disabled, any services that explicitly
depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k NetworkService

Name: ERSvc
Description: Allows error reporting for services and applictions
running in non-standard environments.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: Eventlog
Description: Enables event log messages issued by Windows-based
programs and components to be viewed in Event Viewer. This service
cannot be stopped.
Startup Mode: Auto
Run from: C:WINDOWSsystem32services.exe

Name: EventSystem
Description: Supports System Event Notification Service (SENS), which
provides automatic distribution of events to subscribing Component
Object Model (COM) components. If the service is stopped, SENS will
close and will not be able to provide logon and logoff notifications.
If this service is disabled, any services that explicitly depend on it
will fail to start.
Startup Mode: Manual
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: helpsvc
Description: Enables Help and Support Center to run on this computer.
If this service is stopped, Help and Support Center will be
unavailable. If this service is disabled, any services that explicitly
depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: HidServ
Description: Enables generic input access to Human Interface Devices
(HID), which activates and maintains the use of predefined hot buttons
on keyboards, remote controls, and other multimedia devices. If this
service is stopped, hot buttons controlled by this service will no
longer function. If this service is disabled, any services that
explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: IISADMIN
Description: Allows administration of Web and FTP services through the
Internet Information Services snap-in
Startup Mode: Auto
Run from: C:WINDOWSSystem32inetsrvinetinfo.exe

Name: Irmon
Description: Supports infrared devices installed on the computer and
detects other devices that are in range.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: lanmanserver
Description: Supports file, print, and named-pipe sharing over the
network for this computer. If this service is stopped, these functions
will be unavailable. If this service is disabled, any services that
explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: LanmanWorkstation
Description: Creates and maintains client network connections to
remote servers. If this service is stopped, these connections will be
unavailable. If this service is disabled, any services that explicitly
depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: LmHosts
Description: Enables support for NetBIOS over TCP/IP (NetBT) service
and NetBIOS name resolution.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k LocalService

Name: MSSQLSERVER
Description:
Startup Mode: Auto
Run from: C:PROGRA~1MICROS~4MSSQLbinnsqlservr.exe

Name: Netlogon
Description: Supports pass-through authentication of account logon
events for computers in a domain.
Startup Mode: Auto
Run from: C:WINDOWSSystem32lsass.exe

Name: Netman
Description: Manages objects in the Network and Dial-Up Connections
folder, in which you can view both local area network and remote
connections.
Startup Mode: Manual
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: Nla
Description: Collects and stores network configuration and location
information, and notifies applications when this information changes.
Startup Mode: Manual
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: Norton AntiVirus Server
Description:
Startup Mode: Auto
Run from: C:Program FilesNavNTrtvscan.exe

Name: PlugPlay
Description: Enables a computer to recognize and adapt to hardware
changes with little or no user input. Stopping or disabling this
service will result in system instability.
Startup Mode: Auto
Run from: C:WINDOWSsystem32services.exe

Name: ProtectedStorage
Description: Provides protected storage for sensitive data, such as
private keys, to prevent access by unauthorized services, processes,
or users.
Startup Mode: Auto
Run from: C:WINDOWSsystem32lsass.exe

Name: RasMan
Description: Creates a network connection.
Startup Mode: Manual
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: RemoteRegistry
Description: Enables remote users to modify registry settings on this
computer. If this service is stopped, the registry can be modified
only by users on this computer. If this service is disabled, any
services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSsystem32svchost.exe -k LocalService

Name: RpcSs
Description: Provides the endpoint mapper and other miscellaneous RPC
services.
Startup Mode: Auto
Run from: C:WINDOWSsystem32svchost -k rpcss

Name: SamSs
Description: Stores security information for local user accounts.
Startup Mode: Auto
Run from: C:WINDOWSsystem32lsass.exe

Name: SCardSvr
Description: Manages access to smart cards read by this computer. If
this service is stopped, this computer will be unable to read smart
cards. If this service is disabled, any services that explicitly
depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32SCardSvr.exe

Name: Schedule
Description: Enables a user to configure and schedule automated tasks
on this computer. If this service is stopped, these tasks will not be
run at their scheduled times. If this service is disabled, any
services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: seclogon
Description: Enables starting processes under alternate credentials.
If this service is stopped, this type of logon access will be
unavailable. If this service is disabled, any services that explicitly
depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: SENS
Description: Tracks system events such as Windows logon, network, and
power events. Notifies COM+ Event System subscribers of these events.
Startup Mode: Auto
Run from: C:WINDOWSsystem32svchost.exe -k netsvcs

Name: SharedAccess
Description: Provides network address translation, addressing, name
resolution and/or intrusion prevention services for a home or small
office network.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: ShellHWDetection
Description:
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: SmcService
Description:
Startup Mode: Auto
Run from: C:Program FilesSygateSPFsmc.exe

Name: SMTPSVC
Description: Transports electronic mail across the network
Startup Mode: Auto
Run from: C:WINDOWSSystem32inetsrvinetinfo.exe

Name: Spooler
Description: Loads files to memory for later printing.
Startup Mode: Auto
Run from: C:WINDOWSsystem32spoolsv.exe

Name: SSDPSRV
Description: Enables discovery of UPnP devices on your home network.
Startup Mode: Manual
Run from: C:WINDOWSSystem32svchost.exe -k LocalService

Name: stisvc
Description: Provides image acquisition services for scanners and
cameras.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k imgsvc

Name: TapiSrv
Description: Provides Telephony API (TAPI) support for programs that
control telephony devices and IP based voice connections on the local
computer and, through the LAN, on servers that are also running the
service.
Startup Mode: Manual
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: TermService
Description: Allows multiple users to be connected interactively to a
machine as well as the display of desktops and applications to remote
computers. The underpinning of Remote Desktop (including RD for
Administrators), Fast User Switching, Remote Assistance, and Terminal
Server.
Startup Mode: Manual
Run from: C:WINDOWSSystem32svchost -k DComLaunch

Name: Themes
Description: Provides user experience theme management.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs

Name: TrkWks
Description: Maintains links between NTFS files within a computer or
across computers in a network domain.
Startup Mode: Auto
Run from: C:WINDOWSsystem32svchost.exe -k netsvcs

Name: UMWdf
Description: Enables Windows user mode drivers.
Startup Mode: Auto
Run from: C:WINDOWSsystem32wdfmgr.exe

Name: w32time
Description: Maintains date and time synchronization on all clients
and servers in the network. If this service is stopped, date and time
synchronization will be unavailable. If this service is disabled, any
services that explicitly depend on it will fail to start.

Startup Mode: Auto
Run from: C:WINDOWSsystem32svchost.exe -k netsvcs

Name: W3SVC
Description: Provides Web connectivity and administration through the
Internet Information Services snap-in
Startup Mode: Auto
Run from: C:WINDOWSSystem32inetsrvinetinfo.exe

Name: WebClient
Description: Enables Windows-based programs to create, access, and
modify Internet-based files. If this service is stopped, these
functions will not be available. If this service is disabled, any
services that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k LocalService

Name: winmgmt
Description: Provides a common interface and object model to access
management information about operating system, devices, applications
and services. If this service is stopped, most Windows-based software
will not function properly. If this service is disabled, any services
that explicitly depend on it will fail to start.
Startup Mode: Auto
Run from: C:WINDOWSsystem32svchost.exe -k netsvcs

Name: WLTRYSVC
Description:
Startup Mode: Auto
Run from: C:WINDOWSSystem32WLTRYSVC.EXE
C:WINDOWSSystem32bcmwltry.exe

Name: WMDM PMSP Service
Description:
Startup Mode: Auto
Run from: C:WINDOWSSystem32MsPMSPSv.exe

Name: wuauserv
Description: Enables the download and installation of critical Windows
updates. If the service is disabled, the operating system can be
manually updated at the Windows Update Web site.
Startup Mode: Auto
Run from: C:WINDOWSsystem32svchost.exe -k netsvcs

Name: WZCSVC
Description: Provides automatic configuration for the 802.11 adapters
Startup Mode: Auto
Run from: C:WINDOWSSystem32svchost.exe -k netsvcs


Page 2 of 3.
Results 21...40 of 47