It takes 3 minutes to shut down useless services on your computer (to speed up your computer)

[Recommended] it takes 3 minutes to shut down useless services on your computer (to speed up your computer)
It takes 3 minutes to shut down the useless services on your computer, so that your computer will be able to attack hundreds of viruses and speed up a hundred times (^ 0 ^ )!

There may be a lot of friends who do not know how to start the service options: On the Control Panel → management tools → services; point to the recommended service attribute for "disabled" to "disabled" and press "stop;

Alerter
Microsoft: Notifies selected users and Computer System Management warnings. If you stop this service, programs that use system management alerts will not be notified. If this service is disabled, all services dependent on it cannot be started.
Supplement: Generally, home computers do not need to send or receive warnings from Computer System Management (Administrative Alerts) unless your computer is used on a local network.
Dependency: Workstation
Suggestion: Disabled

Application Layer Gateway Service
Microsoft: supports third-party communication protocol plug-ins for internet online sharing and internet online firewall.
Supplement: if you do not use Internet-based online sharing (ICS) to provide Internet access and Internet-based firewall (ICF) software for multiple computers, you can disable
Dependency: Internt Connection Firewall (ICF)/Internet Connection Sharing (ICS)
Suggestion: Disabled

Application Management)
Microsoft: Provides software installation services for assignment, release, and removal.
Supplement: The software installation and change service mentioned above
Suggestion: Manual

Automatic Updates
Microsoft: enables download and installation of important Windows updates. If you disable this service, you can manually Update the operating system from the Windows Update Website.
Supplement: Allow Windows to automatically check and download the update patch from Microsoft Servers when the background is automatically online.
Suggestion: Disabled

Background Intelligent Transfer Service
Microsoft: Uses idle network bandwidth to transmit data.
Supplement: what information is transmitted in the background through Via HTTP1.1? #124; West, for example, Windows Update is one of the tasks.
Dependency: Remote Procedure Call (RPC) and Workstation
Suggestion: Disabled

ClipBook)
Microsoft: enables the clipboard viewer to store information and share it with remote computers. If this service is stopped, the clipboard viewer cannot share information with a remote computer. If this service is disabled, any service explicitly dependent on it cannot be started.
Supplement: The information in the clipboard is shared with other computers.
Dependency: Network DDE
Suggestion: Disabled

COM + Event System (COM + Event System)
Microsoft: supports the System Event Notification Service (SENS), which allows events to be automatically distributed to the subscribed COM component. If the service is stopped, SENS will shut down and cannot provide logon and logout notifications. If this service is disabled, any service that obviously depends on it cannot be started.
Supplement: Some programs may use COM + components, such as the optimize system application of BootVis. For example, the DCOM shown in the Event Viewer is not enabled.
Dependency: Remote Procedure Call (RPC) and System Event Notification
Suggestion: Manual

COM + System Application
Microsoft: manages the configuration and tracking of COM + components. If you stop this service, most COM + components will not work properly? #092. If this service is disabled, any service that explicitly depends on it cannot be started.
Supplement: If the COM + Event System is a vehicle, the COM + System Application is the driver. If the DCOM shown in the Event Viewer is not enabled
Dependency: Remote Procedure Call (RPC)
Suggestion: Manual

Computer Browser)
Microsoft: maintains the updated computer list on the network and provides it to the computer used as a browser. If you stop the service, the configuration will not be updated or maintained. If this service is disabled, all services dependent on it cannot be started.
Supplement: Generally, you do not need a home computer unless your computer is used on a local area network. However, is it necessary to enable this function on a large area network to slow down the speed?
Dependency: Server and Workstation
Suggestion: Disabled

Cryptographic Services
Microsoft: provides three management services: confirm the Windows archive seal of the [Category directory database service]; add and remove [protected root directory service] For Trusted Root Certificate authorization creden from this computer, and [key service] for assisting in registering this computer for obtaining creden。. If this service is stopped, these management services will not work properly. If this service is disabled, any service explicitly dependent on it cannot be started.
In short, Windows Hardware Quality Lab (WHQL) is a type of Microsoft authentication. If you use Automatic update, you may need this
Dependency: Remote Procedure Call (RPC)
Suggestion: Manual

DHCP Client)
Microsoft: Manages network settings by logging on to and updating IP addresses and DNS names.
Supplement: this is required by DSL/Cable, ICS, and IPSEC to specify the dynamic IP address.
Dependency: AFD network supports environment, NetBT, SYMTDI, TCP/IP Protocol Driver, and NetBios over TCP/IP
Suggestion: Manual

Distributed Link Tracking Client (Distributed Link tracing Client)
Microsoft: maintains connections between NTFS files on different computers in a computer or network domain.
Supplement: Maintain the file links between different computers in the area network.
Dependency: Remote Procedure Call (RPC)
Suggestion: Disabled

Distributed Transaction Coordinator (Distributed Transaction Coordinator)
Microsoft: Coordinates transactions across multiple resource administrators, such as databases, message queues, and file systems. If the service is stopped, these transactions will not occur. If a service is disabled, any service that obviously depends on it cannot be started.
Supplement: As mentioned above, it is generally not suitable for household computers unless you enable Message Queuing.
Dependency: Remote Procedure Call (RPC) and Security Accounts Manager
Suggestion: Disabled

DNS Client)
Microsoft: resolve and cache the Domain Name System (DNS) name of this computer. If you stop this service, the computer will not be able to resolve the DNS name and find the location of the Active Directory domain control site. If this service is disabled, all services dependent on it cannot be started.
Supplement: As mentioned above, IPSEC also needs to be used
Dependency: TCP/IP Protocol Driver
Suggestion: Manual

Error Reporting Service
Microsoft: Allows error reporting for services and applications executed in non-standard environments.
Supplement: Microsoft application error report
Dependency: Remote Procedure Call (RPC)
Suggestion: Disabled

Event Log (Event record file)
Microsoft: event messages sent from Windows-based programs and components can be viewed in the event viewer. This service cannot be stopped.
Supplement: Allow event messages to be displayed on the Event Viewer
Dependency: Windows Management Instrumentation
Suggestion: automatic

Fast User Switching Compatibility
Microsoft: provides application management in a multi-user environment.
Supplement: It is similar to the switching User Function in the logout screen.
Dependency: Terminal Services
Suggestion: Manual

Help and Support
Microsoft: enables the instruction and support center to run on this computer. If this service is stopped, you will not be able to use the instructions and support center. If the service is disabled, all its dependent services cannot be started.
Supplement: if it is not used, it will be disabled.
Dependency: Remote Procedure Call (RPC)
Suggestion: Disabled

Human Interface Device Access
Microsoft: enables universal input access to the human interface device (HID). The HID device starts and maintains the use of the keyboard, remote control, and other preset shortcuts on the multimedia device. If the service is stopped, the shortcut of the service control will no longer work. If this service is disabled, any service explicitly dependent on it cannot be started.
Supplement: As mentioned above
Dependency: Remote Procedure Call (RPC)
Suggestion: Disabled

Imapi cd-Burning COM Service
Microsoft: Uses Image Mastering Applications Programming Interface (IMAPI) to manage CD recording. If the service is stopped, the computer cannot record the CD. If this service is disabled, any service explicitly dependent on it cannot be started.
Supplement: XP integrated CD-R and CD-RW drive drag and drop burning function, but unfortunately not comparable to burning software, turn off can also accelerate the speed of Nero
Suggestion: Disabled

Indexing Service (Index Service)
Microsoft: indexing content and file attributes of local and remote computers; Fast File Access through elastic query languages.
Supplement: simply put, it can help you speed up search, but I think few people can search with remote computers.
Dependency: Remote Procedure Call (RPC)
Suggestion: Disabled

Internet Connection Firewall (ICF)/Internet Connection Sharing (ICS)
Microsoft: Provides network address translation, addressing, and name resolution services and/or services that prevent interference for your home network or small office network.
Supplement: if you do not use internet online sharing (ICS) or internet online firewall (ICF) contained in XP, you can turn it off.
Dependency: Application Layer Gateway Service, Network Connections, Network Location Awareness (NLA), Remote Access Connection Manager
Suggestion: Disabled

IPSEC Services (IP Security Service)
Microsoft: Manages IP Security Principles and starts ISAKMP/Oakley (IKE) and IP Security drivers.
Supplement: assists in protecting data transmitted over the network. As an important part, IPSec provides security for Virtual Private Networks (VPNs), while VPN allows organizations to transmit data over the Internet securely. Some domains may be needed, but most users do not need it.
Dependency: IPSEC driver, Remote Procedure Call (RPC), TCP/IP Protocol Driver
Suggestion: Manual

Logical Disk Manager (Logical Disk administrator)
Microsoft: detects and monitors new hard disk and transmits Disk Area Information to the Logical Disk Management System for configuration. If the service is stopped, the dynamic disk status and settings may be out of date. If this service is disabled, any service explicitly dependent on it cannot be started.
Supplement: the disk administrator is used to dynamically manage disks, such as displaying available disk space and using the Microsoft Management Console (MMC) Console functions.
Dependency: Plug and Play, Remote Procedure Call (RPC), and Logical Disk Manager Administrative Service
Suggestion: automatic

Logical Disk Manager Administrative Service (Logical Disk Administrator System Management Service)
Microsoft: Set the hard disk and disk area. The service only executes the setting program and then stops.
Supplement: Microsoft Management Console (MMC) is used only when features of the Console are used.
Dependency: Plug and Play, Remote Procedure Call (RPC), and Logical Disk Manager
Suggestion: Manual

Messenger)
Microsoft: transmits network and [Alerter] service messages between clients and servers. This service has nothing to do with Windows Messenger. If this service is stopped, Alerter messages will not be transmitted. If this service is disabled, all services dependent on it cannot be started.
Supplement: This function allows mutual message transmission between networks, such as the net send function. If you do not want to be harassed, you can turn it off.
Dependency: NetBIOS Interface, Plug and Play, Remote Procedure Call (RPC), and Workstation
Suggestion: Disabled

MS Software Shadow Copy Provider
Microsoft: manages the shadow replication service in the disk area. If you stop this service, you cannot manage shadow replication in the software-based Disk Area. If this service is disabled, any service that explicitly depends on it cannot be started.
Supplement: As mentioned above, what is used for backup? #124; West, such as the MS Backup program needs this service
Dependency: Remote Procedure Call (RPC)
Suggestion: Disabled

Net Logon
Microsoft: supports pass-through verification for account logon events of computers on the domain.
Supplement: Generally, household computers are unlikely to use the domain name review service.
Dependency: Workstation
Suggestion: Disabled

NetMeeting Remote Desktop Sharing (NetMeeting Remote Desktop Sharing)
Microsoft: allows authorized users to remotely access the computer using NetMeeting over the company's internal network. If this service is stopped, the Remote Desktop Sharing function will be unavailable. If the service is disabled, any services dependent on it cannot be started.
Supplement: As mentioned above, users can share control of computers with other users on the Internet or the Internet. if you pay attention to security and do not want to open more backdoors, just close them.
Suggestion: Disabled

Network Connections (Online Network)
Microsoft: Manages objects in online network and dial-up folders. You can view local network and remote connection in this folder.
Supplement: control your network connection
Dependency: Remote Procedure Call (RPC), Internet Connection Firewall (ICF)/Internet Connection Sharing (ICS)
Suggestion: Manual

Network DDE)
Microsoft: Provides network transmission and security for Dynamic Data Exchange (DDE) programs executed on the same or different computers. If this service is stopped, DDE transmission and security cannot be used. If this service is disabled, any service explicitly dependent on it cannot be started.
Supplement: the average person does not seem to be able to use it.
Dependency: Network dde dsdm, ClipBook
Suggestion: Disabled

Network dde dsdm (Network dde dsdm)
Microsoft: Information Dynamic Data Exchange (DDE) network sharing. If the service is stopped, the DDE network sharing will be unavailable. If this service is disabled, any service explicitly dependent on it cannot be started.
Supplement: the average person does not seem to be able to use it.
Dependency: Network DDE
Suggestion: Disabled

Network Location Awareness (NLA)
Microsoft: Collects and stores network settings and location information, and notifies the application when this information is changed.
Supplement: if you do not use ICF or ICS, you can disable it.
Dependency: AFD network supports environment, TCP/IP Procotol Driver, Internet Connection Firewall (ICF)/Internet Connection Sharing (ICS)
Suggestion: Disabled

Nt lm Security Support Provider (NTLM Security Support Provider)
Microsoft: provides security for Remote Procedure Call (RPC) programs that do not use named pipeline transmission.
Supplement: If Message Queuing or Telnet Server is not used, disable it.
Dependency: Telnet
Suggestion: Disabled

Performance Logs and Alerts (Performance record files and Alerts)
Microsoft: Collects performance data from the local computer or remote computer based on preset schedule parameters, and then writes the data to the record or? #124; send alerts. If the service is stopped, performance information is not collected. If this service is disabled, any service explicitly dependent on it cannot be started.
Supplement: Services of no value
Suggestion: Disabled

Plug and Play (with Plug and Play)
Microsoft: enables computers to identify and adapt to hardware changes without or without input from users. Stopping or disabling this service will cause system instability.
Supplement: As the name implies, it is the PNP environment.
Dependency: Logical Disk Manager, Logical Disk Manager Administrative Service, Messenger, Smart Card, Telephony, Windows Audio
Suggestion: automatic

Portable Media Serial Number
Microsoft: Retrieves the serial number of any portable music player connected to your computer
Supplement: Can I retrieve any music dial numbers through an online computer? No value services
Suggestion: Disabled

Print Spooler (Print multi-task buffer processor)
Microsoft: load the file into memory for printing later.
Supplement: If there is no printer, you can turn it off.
Dependency: Remote Procedure Call (RPC)
Suggestion: Disabled

Protected Storage (Protected Storage device)
Microsoft: Provides protected storage areas for storing sensitive data such as private keys to prevent unauthorized services, processing, or users from accessing them.
Supplement: services used to store passwords on your computer, such as Outlook, Dialup programs, other applications, master-slave architecture, etc.
Dependency: Remote Procedure Call (RPC)
Suggestion: automatic

QoS RSVP (QoS licensing control, RSVP)
Microsoft: Provides network signal and Regional Traffic Control Installation functions for programs that can identify QoS and control applets.
Supplement: the service is used to retain the 20% bandwidth. If your network card does not support 802.1 p or you do not have an ACS server on your computer's domain, you don't need to talk about it.
Dependency: AFD network supports environment, TCP/IP Procotol Driver, Remote Procedure Call (RPC)
Suggestion: Disabled

Remote Access Auto Connection Manager (Remote Access automatic online administrator)
Microsoft: when the program references the remote DNS or NetBIOS name or address, it establishes a remote network connection.
Supplement: some DSL/Cable providers may need to use this to process login programs.
Dependency: Remote Access Connection Manager, Telephony
Suggestion: Manual

Remote Access Connection Manager (Remote Access online administrator)
Microsoft: establishes network connection.
Supplement: online network use
Dependency: Telephony, Internet Connection Firewall (ICF)/Internet Connection Sharing (ICS), Remote Access Auto Connection Manager
Suggestion: Manual

Remote Desktop Help Session Manager
Microsoft: manages and controls Remote Assistance. If the service is stopped, Remote Assistance will be unavailable. Before stopping this service, see the [dependency] label in the content dialog box.
Supplement: The Remote Management and Control assistance mentioned above can be disabled if it is not used.
Dependency: Remote Procedure Call (RPC)
Suggestion: Disable

Remote Procedure Call (RPC) (Remote Procedure Call, RPC)
Microsoft: Provides end point applications and other RPC services.
Supplement: Some devices depend on it. Do not touch it.
Dependency: too many items. Check them by yourself.
Suggestion: automatic

Remote Procedure Call (RPC) Locator (Remote process Call locating Program)
Microsoft: manages the RPC Name Service database.
Supplement: As mentioned above, it is rarely used on computers and can be switched off.
Dependency: Workstation
Suggestion: Disable

Remote Registry (Remote Logon Service)
Microsoft: enables remote users to modify Logon Settings on this computer. If the service is stopped, the user on the computer can only modify the logon status. If this service is disabled, any service explicitly dependent on it cannot be started.
Supplement: For security reasons, it is recommended that you disable it unless you need remote assistance to modify your Logon Settings.
Dependency: Remote Procedure Call (RPC)
Suggestion: Disabled

Removable Storage (detachable Storage device)
Microsoft: None
Supplement: unless you have a Zip disk drive, portable hardware such as USB, or a Tape backup device, you can try to turn it off.
Dependency: Remote Procedure Call (RPC)
Suggestion: Disable

Routing and Remote Access (Routing and Remote Access)
Microsoft: Provides routing services for companies connected to local networks and wide-area networks.
Supplement: As mentioned above, the dial-up service is provided online to the Zone network or VPN service, which is unavailable to users.
Dependency: Remote Procedure Call (RPC), NetBIOSGroup
Suggestion: Disabled

Secondary Logon
Microsoft: Enable the starting program under other certifications. If this service is stopped, this type of login and access will be unavailable. If this service is disabled, any service explicitly dependent on it cannot be started.
Supplement: Allow multiple users to process programs and execute separation tasks.
Suggestion: automatic

Security Accounts Manager (Security Account administrator)
Microsoft: stores the Security Information of the local account.
Supplement: Manage accounts and groups (gpedit. msc) Applications
Dependency: Remote Procedure Call (RPC) and Distributed Transaction Coordinator
Suggestion: automatic

Server)
Microsoft: shares archives, prints, and naming pipelines with this computer over the Internet. If you stop this service, you cannot use these functions. If this service is disabled, all services dependent on it cannot be started.
Supplement: in short, it refers to file and print sharing. Unless you share the file with other computers, it will be disabled.
Dependency: Computer Browser
Suggestion: Disabled

Shell Hardware Detection
Microsoft: provides notifications for automatic playback of hardware events.
Supplement: It is generally used on a memory card, a CD device, or a DVD Device.
Dependency: Remote Procedure Call (RPC)
Suggestion: automatic

Smart Card)
Microsoft: manages the access to the smart card read by this computer. If the service is stopped, the computer cannot read the smart card. If this service is disabled, any service explicitly dependent on it cannot be started.
Supplement: if you do not use Smart Card, you can disable it.
Dependency: Plug and Play
Suggestion: Disabled

Smart Card Helper)
Microsoft: Enable the support for the old non-plug-and-play smart card read headers used by this computer. If the service is stopped, the computer does not support the old read header. If this service is disabled, any service explicitly dependent on it cannot be started.
Supplement: if you do not use Smart Card, you can disable it.
Suggestion: Disabled

SSDP Discovery Service
Microsoft: Enable generic plug-and-play device search on your home network.
Supplement: As mentioned above, the Universal Plug-and-Play (UPnP) service allows computers to find and use devices on the network, devices are searched online through TCP/IP, such as the scanner, digital camera, or printer on the network, that is, the UPnP function is used, which is based on the unavailable security.
Dependency: Universal Plug and Play Device Host
Suggestion: Disabled

System Event Notification (System Event Notification)
Microsoft: tracks system events such as Windows login, network, and power events. The COM + Event System subscriber that notifies these events.
Supplement: As mentioned above
Dependency: COM + Event System
Suggestion: automatic

System Restore Service
Microsoft: executes the System Restoration function. To stop the service, choose my computer> content> [System Restore] To disable System Restore.
Supplement: Send the computer back to the previous status. If it is not used, it will be shut down.
Dependency: Remote Procedure Call (RPC)
Suggestion: Disabled

Task sched)
Microsoft: enables users to set and schedule automatic work on this computer. If you stop this service, these tasks will not be executed during their scheduled time. If this service is disabled, any service that explicitly depends on it cannot be started.
Supplement: Set scheduled tasks, such as scheduled disk scans, virus scans, and updates.
Dependency: Remote Procedure Call (RPC)
Suggestion: automatic

TCP/IP NetBIOS Helper (TCP/IP NetBIOS Helper Program)
Microsoft: supports [NetBIOS over TCP/IP (NetBT)] and NetBIOS name resolution.
Supplement: If your network does not use NetBios or WINS, you can disable it.
Dependency: AFD network supports environment, NetBt
Suggestion: Disabled

Telephony)
Microsoft: provides telephone voice API (TAPI) Support for controlling telephone voice devices and IP-based voice online programs for local computer connections to servers that are executing this service through local area networks.
Supplement: General dial-up modem or some DSL/Cable may be used
Dependency: Plug and Play, Remote Procedure Call (RPC), Remote Access Connection Manager, Remote Access Auto Connection Manager
Suggestion: Manual

Telnet
Microsoft: enables a remote user to log on to this computer and run applications, and supports various TCP/IP Telnet clients, including UNIX-based and Windows-based computers. If the service is stopped, remote users may not be able to access the application. If the service is disabled, any other service explicitly stored in the service will fail to be started.
Supplement: Remote Users are allowed to use Telnet to log on to the computer. Generally, BBS cannot be used if it is misunderstood. This is not related to BBS. For security reasons, if there is no special requirement, it is recommended that you close it.
Dependency: nt lm Security Support Provider, Remote Procedure Call (RPC), TCP/IP Protocol Driver
Suggestion: Disabled

Terminal Services)
Microsoft: Allows multiple users to interact with the same computer, desktop display, and remote computer applications. Enhance the Remote Desktop (including the RD of the system administrator), quickly switch users, remote assistance, and terminal servers.
Supplement: Remote Desktop or remote assistance is disabled without the need.
Dependency: Remote Procedure Call (RPC), Fast User Switching Compatibility, InteractiveLogon
Suggestion: Disabled

Themes
Microsoft: Provides Theme Management for user experience.
Supplement: many people use the set theme, but if they are not, they can close it.
Suggestion: automatic

Uninterruptible Power Supply (Power Supply System)
Microsoft: manages the continuous power supply (UPS) that is connected to this computer ).
Supplement: is constant power supply (UPS) useful to ordinary people? Unless your power supply has this function, it will be turned off.
Suggestion: Disabled

Universal Plug and Play Device Host
Microsoft: provides support for General plug-and-play devices of hosts.
Supplement: it is used to detect and install a Universal Plug-and-Play (UPnP) device, such as a digital camera or printer.
Dependency: SSDP Discovery Service
Suggestion: Disabled

Volume Shadow Copy
Microsoft: Manages and executes Disk Area shadow copies for backup and other purposes. If the service is stopped, Shadow Copy cannot be used for backup, and the backup may fail. If this service is disabled, any service explicitly dependent on it cannot be started.
Supplement: As mentioned above, what is used for backup? #124; West, such as the MS Backup program needs this service
Dependency: Remote Procedure Call (RPC)
Suggestion: Disabled

WebClient
Microsoft: Enables Windows-based programs to create, access, and modify Internet-based files. If you stop this service, these functions will be unavailable. If this service is disabled, any service that explicitly depends on it cannot be started.
Supplement: Use WebDAV to upload files or folders to all Web services. For security reasons, you can try to disable
Dependency: WebDav Client Redirector
Suggestion: Disabled

Windows Audio
Microsoft: Manages audio devices for Windows as the main program. If this service is stopped, the audio device and effect will not work properly? #092. If this service is disabled, any service explicitly dependent on it cannot be started.
Supplement: if you do not have a sound card, you can disable it.
Dependency: Plug and Play, Remote Procedure Call (RPC)
Suggestion: automatic

Windows Image Acquisition (WIA) (Windows Image Acquisition Program)
Microsoft: Provides image capture services for scanners and digital cameras.
Supplement: If the scanner and digital camera support WIA, you can directly view the image file without other drivers, so no scanner or digital camera users can close it.
Dependency: Remote Procedure Call (RPC)
Suggestion: Disabled

Windows Installer (Windows Installer)
Microsoft: Install, repair, and remove software based on instructions contained in the. MSI file.
Supplement: it is a system service that helps users correctly install, set, track, upgrade, and remove software programs and manages standard formats for application creation and installation, tracking components such as archive groups, login projects, and shortcuts
Dependency: Remote Procedure Call (RPC)
Suggestion: Manual

Windows Management Instrumentation (WMI)
Microsoft: provides public interfaces and object models to access management information about operating systems, devices, applications, and services. If this service is stopped, most Windows software will not work properly? #092. If the service is disabled, all services that depend on it cannot be started.
Supplement: As mentioned above, it is a service that provides a standard infrastructure to monitor and manage system resources.
Dependency: Event Log, Remote Procedure Call (RPC)
Suggestion: automatic

Windows Management Instrumentation Driver Extensions (Windows Management Instrumentation Driver extension)
Microsoft: Provides system management information for/from drivers.
Supplement: Windows Management Instrumentation extends to provide information
Suggestion: Manual

Windows Time (Windows Time Setting)
Microsoft: maintains data and time synchronization of all clients and servers on the network. If the service is stopped, the date and time synchronization cannot be performed. If this service is disabled, all dependent services will be stopped.
Supplement: if the network is used for calibration, it will be closed if it is not necessary.
Suggestion: Disabled

Wireless Zero Configuration
Microsoft: provides automatic settings for 802.11 Adapter
Supplement: automatic configuration of wireless network devices means that unless you are using a wireless network adapter, it is necessary for you to use this network zero-management service.
Dependency: NDIS Usermode I/O Protocol, Remote Procedure Call (RPC)
Suggestion: Disabled

WMI Performance Adapter
Microsoft: Provides performance link library information from the WMIHiPerf provider.
Supplement: As mentioned above
Dependency: Remote Procedure Call (RPC)
Suggestion: l disabled

Workstation)
Microsoft: establishes and maintains a client network online to the remote server. If you stop this service, these connections will be unavailable. If this service is disabled, all services dependent on it cannot be started.
Supplement: some functions necessary for Internet connection
Dependency: Alerter, Background Intelligent Transfer Service, Computer Browser, Messenger, Net Logon, Remote Procedure Call (RPC) Locator
Suggestion: automatic

Method 1:
Use the batch processing command: SC CONFIG command for processing
Description:
Modify the service items in the Registry and Service database.
Usage:
SC <server> config [service name] <option1> <option2>...

Option:
Note: The option name includes the equal sign.
Type = <own | share | interact | kernel | filesys | rec | adapt>
Start = <boot | system | auto | demand | disabled>
Error = <normal | severe | critical | ignore>
BinPath = <BinaryPathName>
Group = <LoadOrderGroup>
Tag = <yes | no>
Depend = <dependency (separated by a slash)>
Obj = <AccountName | ObjectName>
DisplayName = <display name>
Password = <password>

Method 2:
Find the suspicious key value under [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Runservices] and view the suspicious primary key under [HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services.
Disable or delete the service items added by the trojan: In "run", enter "Services. msc opens the service settings window, which displays all the service items and their statuses, Startup type, and login nature in the system. Find the service started by the trojan, double-click it, change the Startup Type to "disabled", and then exit. You can also modify it through the registry, expand the "HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services \ Service display name" key in sequence, and find the binary value "Start" in the right pane ", modify the number of numeric values. "2" indicates automatic, "3" indicates manual, and "4" indicates disabled. Of course, it is best to directly Delete the entire primary key. You can use the registry export function to back up these key values for control at any time.