Comprehensive interpretation of Windows XP system services

When you optimize your Windows XP system, you need to turn off some of the less-common services, but what do they do in a number of service projects? Can you shut it? This often annoys many beginners. This detailed reading of XP system services, which is collected here, is expected to help friends who need to optimize the system.





1, Alerter




The process name of the
Alerter (alert) service is Service.exe (that is, the name of the process running in the background after the service is started, as can be seen through Task Manager, below). The function of the Alerter service is to WinXP the management-related events that occur on the system to a designated computer or user on the network, such as when a print error occurs or when a hard disk is about to be filled, such warning messages are served by the WinXP's warning device (Alerter Service) collection, send out. Although the Alerter dependent service does not have Messenger (Messenger) service, the Alerter service must rely on the latter to send out information, so after starting the Alerter service it must also be determined that the Messenger service is working. The receiving computer must also start the Messenger service. Since the Alerter service is running, the service is the user can send "pop-up (pop-up)" Information to other users, this information may be used by attackers to carry out attacks, such as tricking users to modify passwords, etc., resulting in security risks. At the same time, the service causes the user account to leak, also may be exploited by the attacker to carry on the password guessing attack. So for the home single user, even for the vast majority of small LAN, this function is completely disabled, not only save the system resources and speed up the start-up speed, but also improve the security of the machine.





2, Application Layer Gateway Service





The process name for the abbreviation "ALG" (Application-tier Gateway) is ALG.EXE,WINXP Home/pro The default installation is manually initiated. ALG, also known as Proxy Server, is a kind of network firewall classification from the functional level. When an internal computer is connected to an external host, the proxy server acts as a connection relay between the internal computer and the external host. The advantage of using ALG is to hide the address of an internal host and to prevent an external abnormal connection, and any packets that belong to this network service will not pass through the firewall if the agent designed for the application is not installed on the proxy server. Popular point, specifically to the ALG itself, it is the accompanying Internet Connection Sharing/firewall specific control program, if you need to start both, this service is necessary. Of course, only one computer's Internet home can consider disabling the service, but the WinXP built-in firewall effect is good, if not insist on using a third-party firewall, or open it.





3, Application Management




The process name of the
appment (Application Management Service) is SVCHOST.EXE,WINXP Home/pro The default installation startup type is manual, and there is no dependent service relationship. Starting with Win2000, Microsoft introduced a new, effective software management solution based on the MSI file format (application installation information package file)-The Application Management component service (application Management), which not only manages the installation and deletion of software, This service can also be used to modify, repair, and monitor file recovery and to troubleshoot basic failures through demobilization. Usually this service we keep its default state better.





may be a lot of friends have an impression, when ACDSee4.0 just released, due to the installation of the production of ill-conceived, and did not take into account the majority of the system does not support the MSI installation format, the results have to download and install a named Windows Installer MSI helper file to solve the problem. Software that is typically installed in the MSI file format is very well recognized, for example, Office XP, when you run the Software installation program again, it will typically have "reinstall", "Repair Software", "Uninstall Software" multiple options, rather than the previous installer that simply uninstall or overwrite the installation. 4, Automatic Updates





The process name of the Wuauserv (Automatic Update Service) is SVCHOST.EXE,WINXP Home/pro the startup type of the default installation is automatic and there are no dependent service relationships. This is everyone is very familiar with the system Automatic Update function, do not say more. Use kitten to surf the internet and suffer its bitter friends remember that shutting down in system properties is not enough, and Automatic Updates the service is disabled. Later need to update, directly in IE, enter the Windows Update Web site address http://v4.windowsupdate.microsoft.com/zhcn/default.asp Manual update can be.





5, Background intelligent Transfer Service




The process name for
BITS (Background Intelligent Transfer Service) is SVCHOST.EXE,WINXP Home/pro the startup type of the default installation is manual, dependent on remote Procedure call, Workstation service. Microsoft claims that BITS can transfer files using the remaining bandwidth, and when the network shuts down or the computer restarts, the Background Intelligent Transfer Service automatically maintains the file transfer, and when the network is reconnected, the Background Intelligent Transfer Service continues to transfer files from where it stopped. In fact, this service is used to achieve the information transmission between the HTTP1.1 server, and basically its application is to support Automatic Updates when the breakpoint continued transmission. If you disable automatic Updates, it doesn't make sense to keep it.





6, ClipBook




The process name of the
clipsrv (Clipboard Viewer service) is CLIPSRV.EXE,WINXP Home/pro The default installation startup type is manual and relies on the Network DDE service. ClipBook through the network Dynamic Data Exchange service provided by Network DDE and network dde dsdm, you can refer to the Clipboard in the remote machine, which is popularly said to support the Clipboard Viewer (ClipBook Viewer) program. This program allows the clipping page to be browsed by the ClipBook on the remote computer.





For example, there is a larger document engineering, by a, B, C common development. A is responsible for the Excel data section, B is responsible for the Visio cartography section, and C is responsible for consolidating the two parts of the document. C often needs to copy the data of A and B, and the stupid thing is to open a, B-share document in a network Neighborhood, and then copy the relevant content. And users of the Windows system must have heard of OLE this thing, the above Excel data and Visio graphics can be considered a separate OLE object, if a, B, C 3 machines on the ClipBook service is open, You can use ClipBook to share these OLE objects, C as long as you create a link to an OLE object in your own document that points to Excel and Visio,a of A, B, and b any changes you make to your work can be automatically reflected in C's compound document. This shows that ClipBook is based on object sharing, not simple file sharing. So it is also very good to understand that this is a double-edged sword, in bringing great convenience, but also to be illegal remote access to ClipBook clip pages of security risks. For those who do not have the same work, are not ready to use or rarely use Remote Desktop, the service can be completely disabled, when needed to open.





7, COM + Event System




The process name of the
event System (COM + Event Systems Service) is SVCHOST.EXE,WINXP Home/pro the startup type of the default installation is manual and relies on the remote Procedure call service. For friends who are not software development professionals, COM + is a very difficult term to understand. Simply put, COM + is a standard for software components/components. For example, writing a software is like building a house, and doors and windows and other components will be based on the standard design, in order to save time and effort. COM components, such as Windows doors and windows and other standard components, COM + is a further extension of COM, the specific meaning of this is not described in detail. The Windows system is also a typical message (event) processing system, many of which are triggered by messages, resulting in COM + event system. What we want to learn is how to simply determine if there is a program in your system that relies on this service. Check the "program Filescomplus Applications" directory under your system installation disk and turn off the service if nothing else.





8, COM + System application





　　The process name of the Comsysapp (COM + System Application Service) is DLLHOST.EXE,WINXP Home/pro the startup type of the default installation is manual and relies on the remote Procedure call service. Simply put, COM + System application is the specific performer of COM + event system, and it is naturally disabled if COM + Event system is disabled.