Windows XP

1Portable Media Serial Number Service

Retrieves the serial number of any portable media player connected to this
computer. If this service is stopped, protected content might not be down loaded to the device.
svchost.exe
Windows Media Player

WMP
2Remote Registry

svchost.exe

3Security Accounts Manager

lsass.exe

4Shell Hardware Detection

svchost.exe
U
U

WIDNOWS XP GHOST

5COM+ System Application

COM+ COM+

dllhost.exe
WPS OFFICE 2005 COM+

6DCOM Server Process Launcher

DCOM
svchost.exe


WPS OFFICE 2005

ADSL GPRS
7Event Log
Windows

services.exe
DCOM Server Process Launcher

8kavsvc
Provides anti-virus functionality of Personal, installed on your computer.
kavsvc.exe

9Logical Disk Manager

svchost.exe
U

10Logical Disk Manager Administrative Service

dmadmin.exe

11Net Logon
pass-through
lsass.exe

12NT LM Security Support Provider

(RPC)
lsass.exe

13Plug and Play

services.exe
U

14Remote Procedure Call (RPC)

(endpoint mapper) RPC
svchost

15Windows Audio
Windows

svchost.exe
WINDOWS 2003

16Windows Management Instrumentation

Windows

svchost.exe

OFFICE

17Application Management

5 svchost.exe
OFFICE 2003
OK
18ASP.NET State Service
Provides support for out-of-process session states for ASP.NET. If this service is
stopped, out-of-process requests will not be processed. If this service is disabled, any services that
explicitly depend on it will fail to start.
.NET Framework nlite

19Windows Installer
Windows (*.msi)

msiexec.exe
OFFICE

20Fast User Switching Compatibility


svchost.exe

21Human Interface Device Access

(HID)

svchost.exe
USB PS/2
USB
22Network Connections

svchost.exe

svchost.exe 5 4
23Network Location Awareness (NLA)

svchost.exe
22Network Connections
svchost.exe 1 Network Connections svchost.exe
3
24Performance Logs and Alerts

smlogsvc.exe

25Print Spooler

spoolsv.exe

OAERP

26Protected Storage
()

lsass.exe

27Remote Access Connection Manager


svchost.exe
ADSL GPRS
ADSL
28Remote Procedure Call (RPC) Locator
RPC
locator.exe

29Routing and Remote Access

svchost.exe

30Secondary Logon

svchost.exe

31Server

svchost.exe

32SSDP Discovery Service

UPnP
svchost.exe
UPnP

33Task Scheduler

svchost.exe

34Telephony
TAPI LAN
IP
svchost.exe

GPRS CDMA
ADSL 1
svchost.exe
----------------------------------------------------------------------------------------------------------------------
Alerter

(Administrative Alerts)
Workstation

Application Layer Gateway Service

(ICS)
(ICF)
Internt Connection Firewall (ICF) / Internet Connection Sharing (ICS)

Application Management ()

Automatic Updates
Windows
Windows Update
Windows Microsoft Servers

Background Intelligent Transfer Service

Via HTTP1.1 . Windows Update

Remote Procedure Call (RPC) Workstation

ClipBook ()

Network DDE

COM+ Event System (COM+ )

(SENS) COM
SENS

COM+ BootVis optimize system

DCOM
Remote Procedure Call (RPC) System Event Notification

COM+ System Application

COM+ COM+
?#092;
COM+ Event System COM+ System Application
DCOM
Remote Procedure Call (RPC)

Computer Browser ()

Server Workstation

Cryptographic Services
: Windows [];
[];
[]

Windows Hardware Quality Lab (WHQL)

Automatic Updates
Remote Procedure Call (RPC)

DHCP Client (DHCP )

IP DNS
DSL/Cable ICS IPSEC IP
AFD NetBTSYMTDITCP/IP Protocol Driver NetBios over
TCP/IP

Distributed Link Tracking Client ()

 NTFS

Remote Procedure Call (RPC)

Distributed Transaction Coordinator ()

Message Queuing
Remote Procedure Call (RPC) Security Accounts Manager

DNS Client (DNS )

(DNS)
DNS Active Directory

IPSEC
TCP/IP Protocol Driver

Error Reporting Service

Remote Procedure Call (RPC)

Event Log ()
Windows

Windows Management Instrumentation

Fast User Switching Compatibility

Terminal Services

Help and Support

Remote Procedure Call (RPC)


Human Interface Device Access

(HID) HID

Remote Procedure Call (RPC)

IMAPI CD-Burning COM Service

Image Mastering Applications Programming Interface (IMAPI)

XP CD-R CD-RW
Nero

Indexing Service ()
;

Remote Procedure Call (RPC)

Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS)

/

(ICS) XP (ICF)

Application Layer Gateway Service Network Connections Network Location

Awareness(NLA)Remote Access Connection Manager

IPSEC Services (IP )

IP ISAKMP/Oakley (IKE) IP
IPSec (VPN)
VPN

IPSEC driverRemote Procedure Call (RPC)TCP/IP Protocol Driver

Logical Disk Manager ()



Microsoft
Management Console(MMC)
Plug and PlayRemote Procedure Call (RPC)Logical Disk Manager Administrative
Service

Logical Disk Manager Administrative Service ()

Microsoft Management Console(MMC)
Plug and PlayRemote Procedure Call (RPC)Logical Disk Manager

Messenger ()
[Alerter]
Windows Messenger Alerter

net send

NetBIOS InterfacePlug and PlayRemote Procedure Call (RPC)Workstation

MS Software Shadow Copy Provider

?#124; MS Backup
Remote Procedure Call (RPC)

Net Logon
pass-through

Workstation

NetMeeting Remote Desktop Sharing (NetMeeting )

NetMeeting

Network Connections ()

Remote Procedure Call (RPC) Internet Connection Firewall (ICF) / Internet
Connection Sharing (ICS)

Network DDE ( DDE)

(DDE)
DDE

Network DDE DSDMClipBook

Network DDE DSDM ( DDE DSDM)

(DDE) DDE

Network DDE

Network Location Awareness (NLA)

ICF ICS
AFD TCP/IP Procotol DriverInternet Connection Firewall (ICF) /
Internet Connection Sharing (ICS)

NT LM Security Support Provider (NTLM )

(RPC)
Message Queuing Telnet Server
Telnet

Performance Logs and Alerts ()

?#124;


Plug and Play ()

PNP
Logical Disk Manager Logical Disk Manager Administrative
Service Messenger Smart CardTelephonyWindows Audio

Portable Media Serial Number

Retrieves the serial number of any portable music player connected to your computer

2005-5-2021:47:56
Print Spooler ()


Remote Procedure Call (RPC)

Protected Storage ()

Outlook

Remote Procedure Call (RPC)

QoS RSVP (QoS RSVP)

QoS
20% 802.1p
ACS server
AFD TCP/IP Procotol DriverRemote Procedure Call (RPC)

Remote Access Auto Connection Manager ()

DNS NetBIOS
DSL/Cable
Remote Access Connection ManagerTelephony

Remote Access Connection Manager ()

Telephony Internet Connection Firewall (ICF) / Internet Connection Sharing
(ICS) Remote Access Auto Connection Manager

Remote Desktop Help Session Manager

[]

Remote Procedure Call (RPC)
Disable

Remote Procedure Call (RPC) (RPC)

RPC

Remote Procedure Call (RPC) Locator ()

RPC

Workstation
Disable

Remote Registry ()

Remote Procedure Call (RPC)

Removable Storage ()
None
Zip USB Tape

Remote Procedure Call (RPC)

Disable

Routing and Remote Access ()

 VPN
Remote Procedure Call (RPC)NetBIOSGroup

Secondary Logon

Security Accounts Manager ()

(gpedit.msc)
Remote Procedure Call (RPC)Distributed Transaction Coordinator

Server ()

Computer Browser

Shell Hardware Detection

CD DVD
Remote Procedure Call (RPC)

Smart Card ()

Smart Card
Plug and Play

Smart Card Helper ()

Smart Card

SSDP Discovery Service


(Universal Plug and Play, UPnP)
TCP/IP
UPnP
Universal Plug and Play Device Host

System Event Notification ()

Windows COM+

COM+ Event System

System Restore Service

->[]

Remote Procedure Call (RPC)

Task Scheduler ()

Remote Procedure Call (RPC)

TCP/IP NetBIOS Helper (TCP/IP NetBIOS )

[NetBIOS over TCP/IP (NetBT)] NetBIOS
NetBios WINS
AFD NetBt

Telephony ()

IP API (TAPI)
DSL/Cable
Plug and Play Remote Procedure Call (RPC) Remote Access Connection
Manager Remote Access Auto Connection Manager

Telnet

TCP/IP Telnet UNIX Windows

Telnet BBS
BBS
NT LM Security Support ProviderRemote Procedure Call (RPC)TCP/IP Protocol
Driver

Terminal Services ()

( RD)

Remote Procedure Call (RPC)Fast User Switching CompatibilityInteractiveLogon

Themes

Uninterruptible Power Supply ()

(UPS)
(UPS)

Universal Plug and Play Device Host

(Universal Plug and Play, UPnP)

SSDP Discovery Service

Volume Shadow Copy

?#124; MS Backup
Remote Procedure Call (RPC)

WebClient
Windows

WebDAV Web

WebDav Client Redirector

Windows Audio
Windows
?#092;

Plug and PlayRemote Procedure Call (RPC)

Windows Image Acquisition (WIA) (Windows )

WIA

Remote Procedure Call (RPC)

Windows Installer (Windows )

.MSI

Remote Procedure Call (RPC)

Windows Management Instrumentation (WMI)

Windows ?#092;

Event LogRemote Procedure Call (RPC)

Windows Management Instrumentation Driver Extensions (Windows Management

Instrumentation )
/
Windows Management Instrumentation


Windows Time (Windows )

Wireless Zero Configuration

802.11

NDIS Usermode I/O ProtocolRemote Procedure Call (RPC)

WMI Performance Adapter

WMIHiPerf

Remote Procedure Call (RPC)
l

Workstation ()

Alerter Background Intelligent Transfer Service Computer
Browser Messenger Net LogonRemote Procedure Call (RPC) Locator

----------------------------------------------------------------------------------------------------------------------
(-
win+pause break)

/fastdetect nodetect /noguiboot

guiboot

IDE ATA/ATAPI IDE

1 2 DMA
IDE

(--regedit)
AutoEndTasks 1
AutoEndTasks HungAppTimeoutWaitToKillAppTimeout
2000 AutoEndTasks
MenuShowDelay 0
( F3)

OK

-
- fastdetect
/noguiboot

----------------------------------------------------------------------------------------------------------------------

msconfig

Windows Windows

Windows XP

////

Windows XP
Windows XP

Windows XP

//

Windows XP

(/
/
///

Window XP
XP

///

Internet
Internet Internet

Windows XP
//
/Internet

Windows XP
/////
//

1.5
256MB 1.5
512MB

Windows XP

C:WindowsHelp
C:Windowsdriver cachei386 Driver.cab
sfc.exe /purgecache
dll C:Windowssystem32dllcache
 C:WindowsIme chtimeimjp8_1imkr6_1

WindowsXP
Windows XP

C:WindowsInf Sysoc.inf /
,hide hide
,hide//,

Windows XP TMPBAKOLD
Windows Windows XP

////

Windows XP

/
regedit
[HKEY_LOCAL_MACHINE/Software/Microsoft/Windows/CurrentVersion/
Explorer/RemoteComputer/NameSpace] D6277990-4C6A-11CF-
8D87-00AA0060F5BF{}

Windows XP C:Windowsprefetch

Windows XP
PIII 800, 512M /regedit
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSession
ManagerMemory ManagementPrefetchParametersEnablePrefetcher] 01230-
Disable,1-,2-,3- 3

///
Internet

Internet FTP SMTP



DMA
DMA
Windows XP
IDE PIO DMA
IDE DMA CPU

IDE ATA/ATAPI IDE

IDE IDE /
IDE DMA(
)

Dr.Watson
/drwtsn32////
//Dr Watson Dr.Watson

user.dmp MB

WindowsXP
E
dos chkntfs/t:0
0

Windows XP documents and settings

//

/ regedit
[HKEY_CURRENT_USERControlPanelDesktop] AutoEndTasks
1(0)

IE
Windows XP Internet Explorer6
Internet Explorer
IE -nohome