Re: svchost.exe

"Ben" <ben55@xxxxxxxxx> wrote in message
news:Oz67L$G9GHA.3384@xxxxxxxxxxxxxxxxxxxxxxx
Why does svchost.exe use 28MB of RAM on my system? I turn on my PC, let
it boot, login, start task manager and after about 10 mintues svchost.exe
is using 28MB of RAM. Why?

Thanks,

Ok I ran Tasklist /SVC and this was the list:

svchost.exe 772 DcomLaunch, TermService
svchost.exe 856 RpcSs
svchost.exe 920 AudioSrv, Dhcp, dmserver, ERSvc,
EventSystem, Netman, Nla, Schedule,
seclogon, SENS, SharedAccess,
ShellHWDetection, Themes, TrkWks, W32Time,
winmgmt, wscsvc, wuauserv
svchost.exe 964 Dnscache

So I gave my PC a static IP and disabled DHCP client and DNS client
services. I also disabled terminal services and Network Location Awareness
(NLA). I set the task scheduler to manual. I set Security Center (wscsvc)
to manual as my anti-virus software updates itself and I always apply MS
patches within 24 hours of release. I also set W32time to manual. I
rebooted my PC and everything is OK so far. After all of this svchost is
using 15.5MB. Here is an updated list:

svchost.exe 784 DcomLaunch
svchost.exe 884 RpcSs
svchost.exe 944 AudioSrv, dmserver, ERSvc, EventSystem,
Netman, seclogon, SENS, SharedAccess,
ShellHWDetection, Themes, TrkWks, winmgmt,
wuauserv

Here is what I have learned so far about the rest:

DcomLaunch is needed for the firewall
SharedAccess is needed for the firewall

RpcSs cannot be shutoff

AudioSrv is needed for sound
dmserver is needed
ERSvc I like so I leave it on
EventSystem I also like so I leave it on
Netman is needed
SENS is System Event Notification Service and is needed
ShellHWDetection is needed or bootup and login take 5 minutes.
Themes I prefer the way windows looks with this on. It is ugly with it off.
TrkWks is probably needed as it is Distributed Link Tracking Client.
winmgmt is needed
Wuauserv is windows automatic update. Can't disable or microsoftupdate
stops working.

Secondary Logon might or might not be needed. I am a little confused. I
have found conflicting reports on the web about this service. Does
Secondary Logon control the services that use alternate accounts (i.e. Local
System, Local Service, and Network service)? If so then this should
probably stay automatic.

Thanks,



.

Relevant Pages

  • RE: Penetration test of 1 IP address
    ... It does not look like the login screen found on the ... Penetration test of 1 IP address ... "I have been asked to perform a security audit of 1 IP address for client." ...
    (Pen-Test)
  • Re: Windows Login
    ... perfect...no public DNS servers used internally at all. ... We manage several hundred client networks. ... Windows XP desktops, Exchange 2003, WSUS deployments SQL, etc. ... CTRL-ALT-DEL, select Logoff, and RE-login, and they can login ...
    (microsoft.public.windows.server.setup)
  • RE: Penetration test of 1 IP address
    ... regards to carrying out the actual testing phase of the engagement so I will ... "I have been asked to perform a security audit of 1 IP address for client." ... If I enter the IP address and then /webblaze, I am taken to a login page ...
    (Pen-Test)
  • Re: NIS (client) issues...
    ... and any one of them might use the client machine from time ... Perhaps the documentations reagarding NIS simply take ... We have centralized NFS mounted home directories. ... but can not login because /etc/password does not list ...
    (alt.os.linux.suse)
  • Re: Can not open user account through control panel.
    ... I will try those tips out tomorrow as I will be seeing the client ... Bob Toovey ... For the Task Manager ... >> Now I can't access the User Accounts from the Control Panel. ...
    (microsoft.public.windowsxp.help_and_support)