ÿþWindows Registry Editor Version 5.00 ; seans_XP_Service_Killer.reg ; last update 14 Dec 2005 ; created 08 March 2005 ; Disable Alerter (Alerter) ; Disable Indexing Service ; Disable Error Reporting Service (ERSvc) ; Disable Help and Support (helpsvc) ; Disable IMAPI CD-Burning COM Service (ImapiService) ; Disable Machine Debug Manager (MDM) ; Disable Messenger (Messenger) (this is not MSN or Windows Messenger) ; Disable Network DDE (NetDDE) ; Disable Network DDE DSDM (NetDDEdsdm) ; Disable Remote Desktop (RDSessMgr) ; Disable Routing and Remote Access (RemoteAccess) ; Disable Remote Registry (RemoteRegistry) ; Disable Smart Card (SCardSvr) ; Disable Smart Card Helper (SCardDrv) ; Disable System Restore (srservice) ; Disable System Restore Filter Driver (sr) ; Disable Telnet Server (TlntSvr) ; Disable Distributed Link Tracking Client (TrkWks) ; Disable Security Center (wscsvc) ; Manual Application Layer Gateway Service (ALG) (Needed for ICS or Firewall) ; Manual Distributed Transaction Coordinator (MSDTC) ; Manual Windows Firewall/Internet Connection Sharing (SharedAccess) ; Manual Portable Media Serial Number Service (WmdmPmSN) ; Auto Computer Browser (Browser) ; Auto COM+ Event System (EventSystem) ; Auto Network Connections (Netman) ; Auto Network Location Awareness (Nla) ; Auto Remote Access Connection Manager (RasMan) ; DISABLE ; Disable Alerter (Alerter) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Alerter] "Start"=dword:00000004 ; "DisplayName"="Alerter" ; "Description"="Notifies selected users and computers of administrative alerts. If the service is stopped, programs that use administrative alerts will not receive them. If this service is disabled, any services that explicitly depend on it will fail to start." ; Disable Indexing Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cisvc] "Start"=dword:00000004 ; "DisplayName"="Indexing Service" ; "Description"="Indexes contents and properties of files on local and remote computers; provides rapid access to files through flexible querying language." ; Disable Error Reporting Service (ERSvc) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ERSvc] "Start"=dword:00000004 ; "DisplayName"="Error Reporting Service" ; "Description"="Allows error reporting for services and applictions running in non-standard environments." ; Disable Help and Support (helpsvc) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\helpsvc] "Start"=dword:00000004 ; "DisplayName"="Help and Support" ; "Description"="Enables Help and Support Center to run on this computer. If this service is stopped, Help and Support Center will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start." ; Disable IMAPI CD-Burning COM Service (ImapiService) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ImapiService] "Start"=dword:00000004 ; "DisplayName"="IMAPI CD-Burning COM Service" ; "Description"="Manages CD recording using Image Mastering Applications Programming Interface (IMAPI). If this service is stopped, this computer will be unable to record CDs. If this service is disabled, any services that explicitly depend on it will fail to start." ; Disable Machine Debug Manager (MDM) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MDM] "Start"=dword:00000004 ; "DisplayName"="Machine Debug Manager" ; "Description"="Supports local and remote debugging for Visual Studio and script debuggers. If this service is stopped, the debuggers will not function properly." ; Disable Messenger (Messenger) (this is not MSN or Windows Messenger) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Messenger] "Start"=dword:00000004 ; "DisplayName"="Messenger" ; "Description"="Transmits net send and Alerter service messages between clients and servers. This service is not related to Windows Messenger. If this service is stopped, Alerter messages will not be transmitted. If this service is disabled, any services that explicitly depend on it will fail to start." ; Disable Network DDE (NetDDE) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetDDE] "Start"=dword:00000004 ; "DisplayName"="Network DDE" ; "Description"="Provides network transport and security for Dynamic Data Exchange (DDE) for programs running on the same computer or on different computers. If this service is stopped, DDE transport and security will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start." ; Disable Network DDE DSDM (NetDDEdsdm) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetDDEdsdm] "Start"=dword:00000004 ; "DisplayName"="Network DDE DSDM" ; "Description"="Manages Dynamic Data Exchange (DDE) network shares. If this service is stopped, DDE network shares will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. " ; Disable Remote Desktop (RDSessMgr) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RDSessMgr] "Start"=dword:00000004 ; "DisplayName"="Remote Desktop Help Session Manager" ; "Description"="Manages and controls Remote Assistance. If this service is stopped, Remote Assistance will be unavailable. Before stopping this service, see the Dependencies tab of the Properties dialog box." ; Disable Routing and Remote Access (RemoteAccess) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess] "Start"=dword:00000004 ; "DisplayName"="Routing and Remote Access" ; "Description"="Offers routing services to businesses in local area and wide area network environments." ; Disable Remote Registry (RemoteRegistry) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry] "Start"=dword:00000004 ; "DisplayName"="Remote Registry" ; "Description"="Enables remote users to modify registry settings on this computer. If this service is stopped, the registry can be modified only by users on this computer. If this service is disabled, any services that explicitly depend on it will fail to start." ; Disable Smart Card (SCardSvr) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SCardSvr] "Start"=dword:00000004 ; "DisplayName"="Smart Card" ; "Description"="Manages access to smart cards read by this computer. If this service is stopped, this computer will be unable to read smart cards. If this service is disabled, any services that explicitly depend on it will fail to start." ; Disable Smart Card Helper (SCardDrv) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SCardDrv] "Start"=dword:00000004 ; "DisplayName"="Smart Card Helper" ; "Description"="Enables support for legacy non-plug and play smart-card readers used by this computer. If this service is stopped, this computer will not support legacy reader. If this service is disabled, any services that explicitly depend on it will fail to start." ; Disable System Restore (srservice) ;[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srservice] "Start"=dword:00000004 ; "DisplayName"="System Restore Service" ; "Description"="Performs system restore functions. To stop service, turn off System Restore from the System Restore tab in My Computer->Properties" ; Disable System Restore Filter Driver (sr) ;[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sr] ;"Start"=dword:00000004 ; "DisplayName"="System Restore Filter Driver" ; Disable Telnet Server (TlntSvr) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr] "Start"=dword:00000004 ; "DisplayName"="Telnet" ; "Description"="Enables a remote user to log on to this computer and run programs, and supports various TCP/IP Telnet clients, including UNIX-based and Windows-based computers. If this service is stopped, remote user access to programs might be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start." ; Disable Distributed Link Tracking Client (TrkWks) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TrkWks] "Start"=dword:00000004 ; "DisplayName"="Distributed Link Tracking Client" ; "Description"="Maintains links between NTFS files within a computer or across computers in a network domain." ; Disable Security Center (wscsvc) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc] "Start"=dword:00000004 ; "DisplayName"="Security Center" ; "Description"="Monitors system security settings and configurations." ; MANUAL ; Manual Application Layer Gateway Service (ALG) (Needed for ICS or Firewall) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ALG] "Start"=dword:00000003 ; "DisplayName"="Application Layer Gateway Service" ; "Description"="Provides support for 3rd party protocol plug-ins for Internet Connection Sharing and the Windows Firewall." ; Manual Distributed Transaction Coordinator (MSDTC) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSDTC] "Start"=dword:00000003 ; "DisplayName"="Distributed Transaction Coordinator" ; "Description"="Coordinates transactions that span multiple resource managers, such as databases, message queues, and file systems. If this service is stopped, these transactions will not occur. If this service is disabled, any services that explicitly depend on it will fail to start. " ; Manual Windows Firewall/Internet Connection Sharing (SharedAccess) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess] "Start"=dword:00000003 ; "DisplayName"="Windows Firewall/Internet Connection Sharing (ICS)" ; "Description"="Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network." ; Manual Portable Media Serial Number Service (WmdmPmSN) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WmdmPmSN] "Start"=dword:00000003 ; "DisplayName"="Portable Media Serial Number Service" ; "Description"="Retrieves the serial number of any portable media player connected to this computer. If this service is stopped, protected content might not be down loaded to the device." ; Automatic ; Auto Computer Browser (Browser) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser] "Start"=dword:00000002 ; "DisplayName"="Computer Browser" ; "Description"="Maintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start." ; Auto COM+ Event System (EventSystem) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventSystem] "Start"=dword:00000002 ; "DisplayName"="COM+ Event System" ; "Description"="Supports System Event Notification Service (SENS), which provides automatic distribution of events to subscribing Component Object Model (COM) components. If the service is stopped, SENS will close and will not be able to provide logon and logoff notifications. If this service is disabled, any services that explicitly depend on it will fail to start." ; Auto Network Connections (Netman) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netman] "Start"=dword:00000002 ; "DisplayName"="Network Connections" ; "Description"="Manages objects in the Network and Dial-Up Connections folder, in which you can view both local area network and remote connections." ; Auto Network Location Awareness (Nla) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Nla] "Start"=dword:00000002 ; "DisplayName"="Network Location Awareness (NLA)" ; "Description"="Collects and stores network configuration and location information, and notifies applications when this information changes." ; Auto Remote Access Connection Manager (RasMan) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan] "Start"=dword:00000002 ; "DisplayName"="Remote Access Connection Manager" ; "Description"="Creates a network connection." ; END OF FILE