In the interest of troubleshooting, I've created a script that kills most tasks, and stops most services. In addition to the actual commands, the script includes some notes about what each process does (gathered from various sources on the web). I figured I'd post it here, even though it's a work in progress, in case anyone has comments/suggestions/etc.
Code: Select all
rem ======================================
rem kill unnecessary tasks,
rem stop unnecessary services
rem run as an admin
rem ======================================
rem - reference: http://pcpitstop.com/spycheck/SWList.asp
rem - reference: http://www.processlibrary.com/directory
@echo off
rem --------- Thinkpad stuff -------------
rem tphkmgr.exe - thinkpad hotkey manager
rem - child of ...?
rem - run from HKLM/.../Run
taskkill /IM TPHKMGR.exe /f /t
rem tponscr - Thinkpad hotkeys, onscreen display.
Rem - Run from (not registry!) - starts when tphkmgr.exe runs (see above;
REM - also TpScrex.exe)
rem - child of?
taskkill /IM TPONSCR.exe /f /t
rem - TpScrex.exe - TpScrex.exe is the configuration utility for the ThinkPad
rem - ultra Zoom application
rem - run from .... (not registry) - runs when tphkmgr.exe runs (see above)
rem - child of ... nothing - a root proc
taskkill /IM TpScrex.exe /f /t
rem - TpKmpSVC.exe - IBM KCU Service - IBM ThinkPad Keyboard Mapping utility.
rem - child of services
net stop "IBM KCU Service"
rem --------- end keyboard subset
rem amsg.exe - thinkpad Message Center (note, got a success response,
REM but task still running. Used /f, that worked)
rem - run from HKLM/.../Run
rem - child of ...?
taskkill /IM amsg.exe /f /t
rem ezejmnap.exe EasyEject Utility. Child of explorer.
REM Part of Thinkpad Easy Eject Utility
REM - facilitates the removal of multiple devices from your computer by
REM - enabling you to stop more than one device at once, rather than stopping
REM - each device individually.
rem - KEEP THIS
rem ipssvc.exe - Lenovo - virtual network client service
REM - produced by LanCom and offers a VPN Client service for their range of
REM - products.
rem child of services.exe
net stop "IPS Core Service"
rem - logmon.exe - Part of Lenovo Rescue and Recovery Client Security Solution
rem - child of tvtsched.exe - which is a child of services.
rem - (web says) The process can be uninstalled in the Control Panel
rem - Logmon.exe copies the Windows logs to the /IBMSHARE directory so
rem - they're available from the WinPE enviornment.
rem - logmon is launched by tvtscheduler, so disable that being run (services),
REM - or uninstall r&r
rem - could not kill - need to deal with parenet service tvtsched.exe in SERVICES
rem - kill via tvtsched.exe
rem - lpmgr.exe - part of thinkvantage productivity
rem - child of explorer
taskkill /IM lpmgr.exe /f /t
rem - pdservice.exe - File privacy/protection software, provided by Thinkpad.
rem - child of explorer
taskkill /IM pdservice.exe /f /t
rem - rrservice.exe - IBM Thinkpad Rescue and Recovery Service. TVT Service
rem - child of services
net stop "TVT Backup Service"
rem - TPHDEXLG.EXE - IBM HDD APS Logging Service
rem - child of services.
rem - IBM Thinkpad Active Protection System.
rem - KEEP THIS
rem - TpShocks.exe - Responsible for controlling the IBM Hard Drive Active
rem - Protection system found on newer models of IBM Thinkpads
rem - child of explorer.
rem - KEEP THIS
rem - tvtsched.exe - Scheduling application found in IBM ThinkVantage
rem - child of services. Has a child - logmon.exe
net stop "TVT Scheduler"
rem - UCLauncherService.exe - ThinkVantage System Update service
rem - child of Services.
net stop "ThinkVantage System Update"
rem - ibmPmsvc.exe - Power management driver for IBM laptops. Provides support for the
rem - use of four keys on the thinkpad keyboard with blue key tops - Fn, F3, F4 & F12 -
rem - which have specific functions to control the standby and hibernate buttons.
rem - Not required if you don't plan to go into standy or hibernate modes
rem - child of services
net stop "ThinkPad PM Service"
rem - ibmtcsd.exe - TSS Core Service
rem - child of services
net stop "TSS Core Service"
Code: Select all
rem --------- ATI Display stuff -----------------
rem cli.exe - ATI catalyst driver, multimedia taskbar icon for feature/diag.
REM killed TWO processes; not sure what child was killed.
REM - run from HKLM/.../Run
taskkill /IM cli.exe /f /t
rem ati2evxx.exe - ATI External Event Utility
REM - 2 instances running; one could not be 'taskkill' killed - child of services.exe - used "net stop" for that one.
REM - instance that could be killed was child of winlogon.exe.
taskkill /IM ati2evxx.exe /f /t
net stop "Ati HotKey Poller"
rem ----------- CD / DVD Writing software ------------------
rem dlactrlw.exe - Sonic Solutions cd/dvd burning solution
REM - Drive Letter Access (is this only for packet writing?)
REM - can enable/disable DLA using properties sheet of a cd/dvd drive. Disabling does
REM - not seem to get rid of this process or allow it to be killed.
REM - child of explorer
REM - run by HKLM/.../Run
REM - attempt to kill 'Succeeds' but proc is still running (same PID).
taskkill /IM dlactrlw.exe /f /t
rem ezSP_Px.exe - "ezShieldProtector for Px" - Part of Drag n Drop CD/DVD writing Utility.
rem - Child of explorer.
rem - run by HKLM/.../Run
REM - Application that is installed by the Easy Systems Drag'n Drop CD &
REM - DVD writing software found on most Japanese computers. If you're using
REM - Easy Systems Drag’n Drop CD & DVD writing software, this piece of
REM - software will not function without it.
taskkill /IM ezSP_Px.exe /f /t
rem ----------------- InstallShield stuff -----------
rem - issch.exe - install shield scheduler
rem - started from HKLM/.../Run
rem - child of ...? Explorer?
rem - was this ever running on mine? it IS still in the registry run area
taskkill /IM issch.exe /f /t
rem - isuspm.exe - install shield component
rem - started from HKLM/.../Run
rem - child of ...? Explorer?
rem - was this ever running on mine? it IS still in the registry run area
taskkill /IM isuspm.exe /f /t
rem dlg.exe - Digital Line Detect
rem - child of explorer
REM - started by start/progs/startup
REM - Used with various brands of analog modems to detect whether the modem
REM - is plugged into a digital (e.g., ISDN or PBX) line.
REM - Laptop/notebook users may want to keep this program running if they are
REM prone to plugging the notebook into the wrong plug in hotels or
REM convention halls.
taskkill /IM dlg.exe /f /t