Re: PID 1212 slowly maxing out?
- From: "Wesley Vogel" <123WVogel955@xxxxxxxxxxx>
- Date: Thu, 3 May 2007 17:44:28 -0600
Hi Trond,
I question why you have these services running. Maybe you need them. Are you on a network? On dialup?
TermService = Terminal Services
Browser = Computer Browser service
FastUserSwitchingCompatibility = Fast User Switching Compatibility service
lanmanserver = Server service
lanmanworkstation = Workstation service
Nla = Network Location Awareness service
RasMan = Remote Access Connection Manager service
seclogon = RunAs Service / Secondary Logon service
ShellHWDetection = Shell Hardware Detection service
TapiSrv = Telephony service
dmserver = Logical Disk Manager service
ERSvc = Error Reporting Service
TrkWks = Distributed Link Tracking Client service
WZCSVC = Wireless Zero Configuration service
LmHosts = TCP/IP NetBIOS Helper service
RemoteRegistry = Remote Registry service
SSDPSRV = SSDP Discovery Service
WebClient = WebClient service
If not on a network, I would disable the following services:
Terminal Services
Disabled, for security measures.
Manual, if using Remote Desktop (Remote Administration), Remote Assistance, Fast User Switching.
http://smallvoid.com/tweak/winnt/service/stuv.html#TERMSERVICE
Computer Browser service
Automatic, if on a network and there is no dedicated master browser.
Disabled, if not browsing Network Neighborhood for shares/printers.
http://smallvoid.com/tweak/winnt/service/abc.html#BROWSER
Fast User Switching Compatibility
Manual, and it will only be activated when a fast user switch is requested. Otherwise disabled.
http://smallvoid.com/tweak/winnt/service/def.html#FUS
Server service
Automatic, if wanting to share files and printers.
Disabled, if no files to share.
http://smallvoid.com/tweak/winnt/service/stuv.html#SERVER
Workstation service
Automatic, when in a simple home network.
Disabled, if not needing access to network-shares
http://smallvoid.com/tweak/winnt/service/wxyz.html#WORKSTATION
Network Location Awareness
Disabled if not on a network.
http://smallvoid.com/tweak/winnt/service/mno.html#NLA
Remote Access Connection Manager
Disabled, if not using Modem, Virtual Private Networking(VPN) or Internet Connection Sharing.
Manual, if wanting the ability to create such connections when required.
http://smallvoid.com/tweak/winnt/service/pqr.html#RASMAN
RunAs Service / Secondary Logon
Disabled, if not needing to start applications under another accounts credentials.
Manual, if once in awhile need to start an application as another user (Like Administrator).
Automatic, if constantly starting applications as another user, as it will avoid slow application launch.
http://smallvoid.com/tweak/winnt/service/pqr.html#SECLOGON
Shell Hardware Detection
Disabled, unless having problems configuring your Autoplay.
http://smallvoid.com/tweak/winnt/service/stuv.html#SHELLHWDETECTION
Telephony
Disabled if not on a dialup modem.
http://smallvoid.com/tweak/winnt/service/stuv.html#TAPISRV
Logical Disk Manager service
Logical Disk Manager Watchdog Service that detects the appearance/disappearance of hard drives and the partitions they contains.
Note if this service is stopped, then dynamic disk status and configuration information might become outdated. Therefore if one is considering to change this service state to Manual, then make sure that none of the disks in the system are configured as dynamic disks.
http://smallvoid.com/tweak/winnt/service/jkl.html#DMSERVER
If you have none of the above, Logical Disk Manager service doesn't need to run.
Error Reporting Service if don't want to give detailed information about your computer to Microsoft every time an application crashes.
http://smallvoid.com/tweak/winnt/service/def.html#ERSVC
Distributed Link Tracking Client service
Disabled, if on a simple home network.
Automatic, if connected to a domain and uses a NTFS file system.
http://smallvoid.com/tweak/winnt/service/def.html#TRKWKS
Wireless Zero Configuration
Disabled, if not using wireless network with a 802.11 network device.
Automatic, if using wireless netwok AND manufacture of the netcard haven't provided software of their own.
http://smallvoid.com/tweak/winnt/service/wxyz.html#WZCSVC
TCP/IP NetBIOS Helper service
Disabled, if on a simple home network (Even if using Netbios over TcpIp).
Automatic, if needing to login on to a domain using Netbios/WINS or using the LmHosts-file.
http://smallvoid.com/tweak/winnt/service/stuv.html#LMHOSTS
Remote Registry service
Disabled, for security measures.
http://smallvoid.com/tweak/winnt/service/pqr.html#REMOTEREGISTRY
SSDP Discovery Service
Disabled, unless working with networked Universal Plug and Play devices or using Internet Connection Sharing.
http://smallvoid.com/tweak/winnt/service/stuv.html#SSDPSRV
WebClient
Disabled.
http://smallvoid.com/tweak/winnt/service/wxyz.html#WEBCLIENT
You can look up recommendations for services here...
http://smallvoid.com/tweak/winnt/services.html
http://www.blackviper.com/WinXP/servicecfg.htm
--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
In news:ehTO0UZjHHA.3940@xxxxxxxxxxxxxxxxxxxx,
Trond Svendsen <trond@xxxxxxxxxxxxx> hunted and pecked:
Background; while installing WinXP recently, I installed Symantec
Antivirus Corp Edition 10.1.6.6000 /SAV) before installing any network
drivers. Then I started Windows Update, and installed the rest of my
software.
Just now I booted into safe mode, and ran a deep scan using SAV. No risks,
or viruses found.
I consider myself an experienced user, and I've (re)installed WinXP many
times, but this is the first time I've experienced this issue.
Here are a list of the SVCHOST.EXE running:
svchost.exe 952 DcomLaunch, TermService
svchost.exe 1020 RpcSs
svchost.exe 1060 AudioSrv, Browser, CryptSvc, Dhcp,
dmserver,
ERSvc, EventSystem,
FastUserSwitchingCompatibility, helpsvc,
lanmanserver, lanmanworkstation, Netman,
Nla, RasMan, Schedule, seclogon, SENS,
SharedAccess, ShellHWDetection, TapiSrv,
Themes, TrkWks, W32Time, winmgmt, wscsvc,
wuauserv, WZCSVC
svchost.exe 1156 Dnscache
svchost.exe 1232 LmHosts, RemoteRegistry, SSDPSRV,
WebClient
Best regards
Trond Svendsen
PID, process identifier, numbers change every time that you boot and PID
numbers are not necessarily the same from one machine to the next. PIDs
can be used with the netstat -ano command, for example, to see what PID
is what process in the Task Manager.
process identifier (PID)
[[A numerical identifier that uniquely distinguishes a process while it
runs. Use Task Manager to view PIDs.]]
The Network Service account is a special built-in account that has
reduced privileges similar to an authenticated user account. The actual
name of the
account is NT AUTHORITY\NetworkService.
Network Service uses this...
C:\WINDOWS\System32\svchost.exe -k NetworkService
to start svchost.exe to load DnsCache, the DNS Client service, which is
dnsrslvr.dll.
UPDATE your antivirus software and run a full system scan.
UPDATE whatever anti-spyware applications that you have and run a full
system scan with each one.
You might want to start in Safe Mode to run your antivirus and
anti-spyware
software.
Running a full system antivirus scan or anti-spyware scan in Safe Mode
can be a good idea. Some viruses and other malware like to conceal
themselves in areas Windows protects while using them. Safe mode can
prevent those applications access and therefore unprotect the viruses or
other malware allowing for easier removal.
''In safe mode, you have access to only basic files and drivers
(mouse, monitor, keyboard, mass storage, base video, default system
services), just the minimum device drivers required to start Windows.''
Because of that some malware does not load in Safe Mode and is easier to
get
rid of.
How to start Windows in Safe Mode Windows XP
http://www.bleepingcomputer.com/forums/index.php?showtutorial=61#winxo
--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
In news:uyfwK5MjHHA.4772@xxxxxxxxxxxxxxxxxxxx,
Trond Svendsen <trond@xxxxxxxxxxxxx> hunted and pecked:
It's SVCHOST.EXE (PID 1212)
Best regards Trond Svendsen
Hi Trond,
What is the Image name (exe) that belongs to the NETWORK SERVICE that
is maxing out? You can use view / Select Columns to get more info from
task manager.
CreateWindow
http://justpageprobe.com
The FREE Web page utility you always wanted.
Keep your router connected.
Email your IP to where you need it.
Test your enterprise Web Servers.
Plus lots more
"Trond Svendsen" <trond@xxxxxxxxxxxxx> wrote in message
news:ux8pfkIjHHA.4188@xxxxxxxxxxxxxxxxxxxxxxx
After my last re-installation of Windows XP SP2 (all updates applied),
PID 1212 is slowly increasing in memory usage, until the whole OS just
acts up and I have to re-boot the laptop.
What does PID 1212 (Network Service) do, and can I stop it from
happening, besides re-installing again?
Regards
Trond Svendsen
.
- Follow-Ups:
- Re: PID 1212 slowly maxing out?
- From: Trond Svendsen
- Re: PID 1212 slowly maxing out?
- References:
- PID 1212 slowly maxing out?
- From: Trond Svendsen
- Re: PID 1212 slowly maxing out?
- From: CreateWindow
- Re: PID 1212 slowly maxing out?
- From: Trond Svendsen
- Re: PID 1212 slowly maxing out?
- From: Wesley Vogel
- Re: PID 1212 slowly maxing out?
- From: Trond Svendsen
- PID 1212 slowly maxing out?
- Prev by Date: Re: Physical Memory Going Nuts!!
- Next by Date: Re: No Sound
- Previous by thread: Re: PID 1212 slowly maxing out?
- Next by thread: Re: PID 1212 slowly maxing out?
- Index(es):
Relevant Pages
|
