In the interest of troubleshooting, I've created a script that kills most tasks, and stops most services. In addition to the actual commands, the script includes some notes about what each process does (gathered from various sources on the web). I figured I'd post it here, even though it's a work in progress, in case anyone has comments/suggestions/etc.
Code: Select all
rem ====================================== rem kill unnecessary tasks, rem stop unnecessary services rem run as an admin rem ====================================== rem - reference: http://pcpitstop.com/spycheck/SWList.asp rem - reference: http://www.processlibrary.com/directory @echo off rem --------- Thinkpad stuff ------------- rem tphkmgr.exe - thinkpad hotkey manager rem - child of ...? rem - run from HKLM/.../Run taskkill /IM TPHKMGR.exe /f /t rem tponscr - Thinkpad hotkeys, onscreen display. Rem - Run from (not registry!) - starts when tphkmgr.exe runs (see above; REM - also TpScrex.exe) rem - child of? taskkill /IM TPONSCR.exe /f /t rem - TpScrex.exe - TpScrex.exe is the configuration utility for the ThinkPad rem - ultra Zoom application rem - run from .... (not registry) - runs when tphkmgr.exe runs (see above) rem - child of ... nothing - a root proc taskkill /IM TpScrex.exe /f /t rem - TpKmpSVC.exe - IBM KCU Service - IBM ThinkPad Keyboard Mapping utility. rem - child of services net stop "IBM KCU Service" rem --------- end keyboard subset rem amsg.exe - thinkpad Message Center (note, got a success response, REM but task still running. Used /f, that worked) rem - run from HKLM/.../Run rem - child of ...? taskkill /IM amsg.exe /f /t rem ezejmnap.exe EasyEject Utility. Child of explorer. REM Part of Thinkpad Easy Eject Utility REM - facilitates the removal of multiple devices from your computer by REM - enabling you to stop more than one device at once, rather than stopping REM - each device individually. rem - KEEP THIS rem ipssvc.exe - Lenovo - virtual network client service REM - produced by LanCom and offers a VPN Client service for their range of REM - products. rem child of services.exe net stop "IPS Core Service" rem - logmon.exe - Part of Lenovo Rescue and Recovery Client Security Solution rem - child of tvtsched.exe - which is a child of services. rem - (web says) The process can be uninstalled in the Control Panel rem - Logmon.exe copies the Windows logs to the /IBMSHARE directory so rem - they're available from the WinPE enviornment. rem - logmon is launched by tvtscheduler, so disable that being run (services), REM - or uninstall r&r rem - could not kill - need to deal with parenet service tvtsched.exe in SERVICES rem - kill via tvtsched.exe rem - lpmgr.exe - part of thinkvantage productivity rem - child of explorer taskkill /IM lpmgr.exe /f /t rem - pdservice.exe - File privacy/protection software, provided by Thinkpad. rem - child of explorer taskkill /IM pdservice.exe /f /t rem - rrservice.exe - IBM Thinkpad Rescue and Recovery Service. TVT Service rem - child of services net stop "TVT Backup Service" rem - TPHDEXLG.EXE - IBM HDD APS Logging Service rem - child of services. rem - IBM Thinkpad Active Protection System. rem - KEEP THIS rem - TpShocks.exe - Responsible for controlling the IBM Hard Drive Active rem - Protection system found on newer models of IBM Thinkpads rem - child of explorer. rem - KEEP THIS rem - tvtsched.exe - Scheduling application found in IBM ThinkVantage rem - child of services. Has a child - logmon.exe net stop "TVT Scheduler" rem - UCLauncherService.exe - ThinkVantage System Update service rem - child of Services. net stop "ThinkVantage System Update" rem - ibmPmsvc.exe - Power management driver for IBM laptops. Provides support for the rem - use of four keys on the thinkpad keyboard with blue key tops - Fn, F3, F4 & F12 - rem - which have specific functions to control the standby and hibernate buttons. rem - Not required if you don't plan to go into standy or hibernate modes rem - child of services net stop "ThinkPad PM Service" rem - ibmtcsd.exe - TSS Core Service rem - child of services net stop "TSS Core Service"
Code: Select all
rem --------- ATI Display stuff ----------------- rem cli.exe - ATI catalyst driver, multimedia taskbar icon for feature/diag. REM killed TWO processes; not sure what child was killed. REM - run from HKLM/.../Run taskkill /IM cli.exe /f /t rem ati2evxx.exe - ATI External Event Utility REM - 2 instances running; one could not be 'taskkill' killed - child of services.exe - used "net stop" for that one. REM - instance that could be killed was child of winlogon.exe. taskkill /IM ati2evxx.exe /f /t net stop "Ati HotKey Poller" rem ----------- CD / DVD Writing software ------------------ rem dlactrlw.exe - Sonic Solutions cd/dvd burning solution REM - Drive Letter Access (is this only for packet writing?) REM - can enable/disable DLA using properties sheet of a cd/dvd drive. Disabling does REM - not seem to get rid of this process or allow it to be killed. REM - child of explorer REM - run by HKLM/.../Run REM - attempt to kill 'Succeeds' but proc is still running (same PID). taskkill /IM dlactrlw.exe /f /t rem ezSP_Px.exe - "ezShieldProtector for Px" - Part of Drag n Drop CD/DVD writing Utility. rem - Child of explorer. rem - run by HKLM/.../Run REM - Application that is installed by the Easy Systems Drag'n Drop CD & REM - DVD writing software found on most Japanese computers. If you're using REM - Easy Systems Drag’n Drop CD & DVD writing software, this piece of REM - software will not function without it. taskkill /IM ezSP_Px.exe /f /t rem ----------------- InstallShield stuff ----------- rem - issch.exe - install shield scheduler rem - started from HKLM/.../Run rem - child of ...? Explorer? rem - was this ever running on mine? it IS still in the registry run area taskkill /IM issch.exe /f /t rem - isuspm.exe - install shield component rem - started from HKLM/.../Run rem - child of ...? Explorer? rem - was this ever running on mine? it IS still in the registry run area taskkill /IM isuspm.exe /f /t rem dlg.exe - Digital Line Detect rem - child of explorer REM - started by start/progs/startup REM - Used with various brands of analog modems to detect whether the modem REM - is plugged into a digital (e.g., ISDN or PBX) line. REM - Laptop/notebook users may want to keep this program running if they are REM prone to plugging the notebook into the wrong plug in hotels or REM convention halls. taskkill /IM dlg.exe /f /t