| CyberDefenseGuide A How-To Guide To Internet Security and Windows Repair |
| Internet Security | Windows Repair |
| Remotescan Remote Virus Removal and Security Maintenance Service Remotescan |
| Batch Files |
Use these batch files to increase Windows security and increase performance.
Supports Windows XP, Vista and 2000 except where stated.
NOTE: Batch file support is being introduced for Windows 7.
Please wait for this message to disappear before using these batch files under Windows 7.
To understand how batch files work see Understanding .bat Files
This is probably the most important section because it involves reducing your pc's surface area of attack vulnerability by switching off programs you
don't need. If a Windows service (program) is not actually running then it can't be exploited and used as a conduit to spread infection onto your pc.
Use these bat files to switch off certain Windows services that you don't need to have running all the time.
The fewer services you have running the quicker and more responsive your computer will be.
As with all changes to your operating system like these you must backup your important files and make a system restore point
in case your computer does not boot up properly after the changes.
DOWNLOAD Unsafe Services Off.bat
Turns off and disables all potentially unsafe Windows services that use the internet.
Do not run this if you use any of the following:
Remote Assistance, Remote Desktop, dial-up internet, modem-fax, network printing.
DOWNLOAD Unsafe Services On.bat
Use this to switch back on the Unsafe Services if any of your programs or software fails to work properly after switching them off.
You can edit the batch file to remove or change any services by following the advice in Understanding .bat Files
DOWNLOAD Minimum Windows Services.bat
Sets the startup state for a minimum number of services for fastest performance but limited functionality in certain areas.
All rarely used services are off, as are unsafe and unnecessary services. Major points to note are as follows:
Core Windows services set to 'automatic' or 'demand' -
COM+ Event System - EventSystem - auto
Cryptographic Services - CryptSvc - auto
Logical Disk Manager - dmserver - auto
Logical Disk Manager Administrative Service - dmadmin - demand
Plug and Play - PlugPlay - auto
Remote Procedure Call - RpcSs - auto
Remote Procedure Call (RPC) Locator - RpcLocator - demand
Security Accounts Manager - SamSs - auto
Security Center - wscsvc - auto
System Event Notification - SENS - auto
Windows Audio - AudioSrv - auto
Windows Management Instrumentation - winmgmt - auto
Windows Management Instrumentation Driver Extensions - Wmi - demand
Windows Time - W32Time - auto
Essential Windows services set to 'automatic' or 'demand' -
DHCP Client - Dhcp - auto - required for internet connection
Event Log - Eventlog - demand - required for Event Viewer, service dependencies, Security Center, and for Windows Firewall/Internet Connection Sharing
IPSEC Services - PolicyAgent - auto - required for internet connection
Network Connections - Netman - demand - required for internet connection
Network Location Awareness - Nla - demand - required for network access
Removable Storage - NtmsSvc - demand - required for backup
System Restore Service - srservice - auto - required for System Restore
Task Scheduler - Schedule - demand - required for Scheduled Tasks like antivirus scans, backup, Avira updates etc
Windows Firewall/Internet Connection Sharing (ICS) - SharedAccess - auto - required for network access
Windows Installer - MSIServer - auto - required by many software installation packages
DOWNLOAD Standard Windows Services.bat
Use this in case you cannot run certain programs. Most useful services are enabled including the following:
TBA
DOWNLOAD Windows XP Updates On.bat
Sets to Automatic and switches on all services required under Windows XP for functionality of the Windows Update service.
Use this bat if you prefer to check for Windows updates manually (once per week is recommended).
Requires reboot to enable Security Center and Windows Firewall/Internet Connection Sharing if Event Log had previously been disabled.
Services are set as follows:
Background Intelligent Transfer Service - BITS - auto - start
Event Log - Eventlog - auto - start
Windows Installer - MSIServer - auto - start
Automatic Updates - wuauserv - auto - start
Cryptographic Services - CryptSvc - auto - start
The Automatic setting is required due to reboots often required while updating Windows, the service must be running after the reboot in order to ensure there is no fault installing updates to core Windows services.
DOWNLOAD Windows XP Updates Off.bat
Switches off and disables all services used by Windows Update except for Windows Installer.
Event Log and Windows Installer's startup states are set to demand (Manual) so they are available when needed but not running continuously.
However, Event Log will usually be running continuously even if you run the Minimum Windows Services.bat because it is used by the
default internet provision services Security Center and Windows Firewall/Internet Connection Sharing.
Background Intelligent Transfer Service - BITS - disabled - stop
Event Log - Eventlog - demand - (can only be stopped if disabled but should not be disabled if you intend to use the internet or network)
Automatic Updates - wuauserv - disabled - stop
DOWNLOAD Windows Vista and 7 Updates On.bat
Sets to Automatic and switches on all services required under Windows Vista or Windows 7 for functionality of the Windows Update service.
Use this bat if you prefer to check for Windows updates manually (once per week is recommended). Requires reboot to enable Security Center
and Windows Firewall/Internet Connection Sharing if Event Log had previously been disabled.
DCOM Server Process Launcher - DcomLaunch - auto - start
Background Intelligent Transfer Service - BITS - auto - start
Event Log - Eventlog - auto - start
Windows Installer - MSIServer - auto - start
Automatic Updates - wuauserv - auto - start
Cryptographic Services - CryptSvc - auto - start
The Automatic setting is required due to reboots often required while updating Windows, the service must be running after the reboot
in order to ensure there is no fault installing updates to core Windows services.
DOWNLOAD Windows Vista and 7 Updates Off.bat
Switches off and disables all services used by Windows Update except for Windows Installer.
Event Log and Windows Installer's startup states are set to demand (Manual) so they are available when needed but not running continuously.
However, Event Log will usually be running continuously even if you run the Minimum Windows Services.bat because it is used by the default
internet provision services Security Center and Windows Firewall/Internet Connection Sharing.
Background Intelligent Transfer Service - BITS - disabled - stop
Event Log - Eventlog - demand - (can only be stopped if disabled but should not be disabled if you intend to use the internet or network)
Automatic Updates - wuauserv - disabled - stop
DOWNLOAD AVOn.bat
Turns on the services associated with Avira AntiVir and A-squared Free.
DOWNLOAD AVOff.bat
If you're offline and don't intend to run any unscanned file downloads you can use this to turn off the services associated
with Avira AntiVir and A-squared Free. To switch off Avira completely you will need to follow the advice here.
DOWNLOAD System Restore On.bat
DOWNLOAD System Restore Off.bat
Switches the System Restore service on or off.
DOWNLOAD Fast User Switching On.bat
DOWNLOAD Fast User Switching Off.bat
Starts the Fast User Switching Compatibility service to enable the Switch User option under Log Off to change user accounts.
DOWNLOAD LAN Sharing On.bat
Supports Windows XP and 2000.
Use this to switch on networking services required for Local Area Networking.
To use 'My Network Places' you must enable 'Client for Microsoft Networks' and 'File and Printer Sharing for Microsoft Networks' under
the Properties of your Local Area Connection in Network Connections.
DOWNLOAD LAN Sharing Off.bat
Supports Windows XP and 2000.
Use this to switch off networking services required for Local Area Networking.
To increase your security you should also uncheck 'Client for Microsoft Networks' and 'File and Printer Sharing for Microsoft Networks' under
the Properties of your Local Area Connection in Network Connections.
DOWNLOAD Removable Storage On.bat
DOWNLOAD Removable Storage Stop.bat
DOWNLOAD Removable Storage Disable.bat
Use these three to toggle external harddrives between on (auto), stop (demand) and disable (disabled).
An external (removable) drive is ideal for backing up your system & files.
DOWNLOAD Computer Management On.bat
DOWNLOAD Computer Management Off.bat
Switches on or off programs necessary for indepth computer maintenance using Event Viewer and Performance Logs.
DOWNLOAD MSBSAOn.bat
DOWNLOAD MSBSAOff.bat
Switches on or off the Workstation, Server and Net Logon services necessary for Microsoft Baseline Security Analyser to work.
©Helptree Services 2010