Application Layer Gateway Service. Which Windows services are needed and which can be disabled? So what are these Windows services?

Equipment

Alerter

Sends administrative alerts to selected users and computers. If the service is stopped, programs that use administrative alerts will not receive them. If this service is not allowed, any explicitly dependent services will fail to start, for example the command net send

Default settings: Manually

This service is needed to send messages over the local network. In most cases, you can turn it off.

COM+ System Application

Manage the configuration and monitoring of COM+ components. If this service is stopped, most COM+ components will not work correctly.

Default settings: Manually

Application Layer Gateway Service - alg.exe

Location: WINDOWS\system32


Description: Application Layer Gateway Service (Application Layer Gateway Service)

Provides support for third party PnP protocols for Internet connection sharing and Internet connections using a firewall. This service is required when using Internet Firewall/Internet Sharing to connect to the Internet.

Default value: Manually

Dependencies on this service:

Internet Connection Firewall/Internet Connection Sharing

Cryptographic Services

Provides three management services: a directory database service that verifies digital signatures of Windows files; Secure Root service, which adds and removes trusted root CA certificates from this computer; and a key service that allows you to enroll for certificates from that computer. If this service is stopped, all of these management services will not work. If this service is disabled, any services that explicitly depend on it cannot start.

Default settings: Auto

There is no need to change the default settings. Otherwise, there will be problems installing drivers, automatic updates, service packs, DirectX, etc.

Sharing folder server - clipsrv.exe

Location: WINDOWS\system32


Description: Windows NT DDE Server

A sharing folder server (ClipBook) allows you to store information and share it with remote computers. If this service is stopped, then this option will not be available.

Default value: Automatically

Dependencies of this service: Network DDE Network DDE DSDM

  1. Use the program Windows Customizer to find the cause of problems, including slow computer operation.
  2. Update the program Application Layer Gateway Service. The update can be found on the manufacturer's website (link below).
  3. The following paragraphs provide a description of how alg.exe works.

Alg.exe file information

Description: The Application Layer Gateway service is part of the Internet Connection Sharing (ICS) and Windows Firewall features in Windows XP. It allows applications such as messaging clients and file transfer programs to use passive TCP/UDP ports to communicate with the server. This service may be disabled when using a third firewall instead of the Windows version. If this is the case, it is better to disable it in Control Panel rather than manually disabling it every time.

Detailed analysis: alg.exe often causes problems and is essential for Windows. Alg.exe is located in the C:\Windows\System32 folder. The following file sizes are known for Windows 10/8/7/XP 44,544 bytes (95% of all cases), 59,392 bytes and .
The service name is ALG.
The application is not visible to users. This is a trustworthy file from Microsoft. A process uses a port to join a network or the Internet. Alg.exe is able to connect to the Internet. Therefore, the technical reliability rating 16% danger.

How to recognize suspicious processes?

  • If alg.exe is located in the folder "C:\Program Files\Common Files", then the reliability rating 61% danger. File size 33,205 bytes. The process has a visible window. The process is loaded during the Windows boot process (See registry key: MACHINE\Run , Run , User Shell Folders). This is not a Windows system file.
  • If alg.exe is located in a subfolder of "C:\Users\USERNAME", then the reliability rating 53% danger. File size 131.072 bytes (25% of all cases), 527.872 bytes, 128.512 bytes or 963.286 bytes. This is not a Windows system file. There is no information about the creator of the file. The process has no visible window. Alg.exe is capable of recording input and monitoring applications.
  • If alg.exe is located in subfolders of the C:\ drive, then the reliability rating 64% danger. File size 184,832 bytes.

Important: Some malware camouflages itself as alg.exe, especially if it is located Not in the C:\Windows\System32 directory. Therefore, you should check the alg.exe file on your PC to see if it is a threat. We recommend checking the security of your computer.


Total: Average rating of site users about the file alg.exe: - based on 25 votes with 19 reviews.

152 users asked about this file. 2 users did not give a rating (“I don’t know”). 8 users rated it as not dangerous. 2 users rated it as not dangerous. 9 users rated it as neutral. 4 users rated it as dangerous. 2 users rated it as dangerous.

This article contains specific recommendations on which services in Windows can be safely disabled - with one caveat: if you are dealing with your personal computer, which is not included in any tricky computer network or is specially configured for highly specialized tasks.

Disabling unnecessary services leads to increased performance - and, of course, saving RAM. The system will not be distracted by unnecessary tasks. In addition, security will also increase - if some services that allow you to connect to the computer from the outside simply do not work, then the connection is impossible. Explanations will be given using Windows XP, Windows Vista and Windows Seven as examples - the services in all systems are similar and differ mainly in names. The differences in names will be indicated separately; for Windows XP I will also give the English names of the services (apparently, there are very few users of English Vista/Seven in Russia - and the services, again, have approximately the same names).

Automatic updates

Vista/Seven: Windows Update

If you do not need updates and the unnecessary problems associated with them, you can disable this service. Stable builds of systems, as a rule, are free from serious errors and can be used for an indefinitely long time without any updates. Most often, updates include bug fixes in security systems that a home computer that is not connected to any network does not need at all. In Vista/Seven, I often encountered the fact that after updates the system cannot boot for a long time (or even freezes) - so, for my clients, I most often immediately disable this service.

In some cases, disabling the update service in Vista/Seven makes it impossible to install some system things - for example, .Net framework 3.5. To install, you need to enable the service, and then you can disable it again. I don’t remember such problems in XP in my entire history of use.

Wireless zero configuration

Vista/Seven: WLAN AutoConfig Service

If your computer does not have wireless adapters (and in most cases this is the case if we are talking about a stationary home machine), the service can be disabled.

Windows firewall/Internet connection sharing (ICS)

The firewall itself is absolutely useless and, in fact, does not particularly protect against anything (except that it creates unnecessary problems - for example, with multicast IPTV streams). It is better to install a third-party firewall, or simply disable the firewall, because... For most providers, the Windows network still does not work, and the remaining dangerous things like remote access can simply be disabled. If your computer is used as a gateway to the Internet for another home machine, you cannot disable the firewall, because It is he who handles the general connection to the Internet.

Web Client

The description says that "this service allows you to manipulate files on the Internet." What and how - I have no idea; for 10+ years the service has never been useful.

Print spooler

Vista/Seven: Print Manager

If there is no printer in the system, disable it.

Vista/Seven only: Windows Defender

It is not clear why it is needed if there is a normal antivirus. In fact, it mainly monitors the original Windows components (Internet Explorer, Windows add-ons, etc.). For example, I do not use them in any of the systems. With the release of Microsoft Security Essentials, it was announced that Defender could be retired. There is no Defender in XP, but you can install it for free. Again, it’s unclear why...

NetBIOS support module via TCP/IP (TCP/IP NetBIOS helper)

If your computer is not connected to a network with others communicating via Windows Network, feel free to disconnect it.

XP/Vista only: Computer browser

If the computer, as in the previous case, is not part of a Windows network with others, the service is not needed.

Shell hardware detection

Disabling this service significantly increases system security - after this, flash drives, CDs, etc. will no longer open automatically. This means that auto-running of malicious code from a infected storage medium is excluded. An experienced user himself is able to log into a removable device without any “helpful” autostarts.

Workstation

In theory, this service is needed to function in a networked environment (which means that it can be disabled if one is not observed). Personally, I always turned it off and didn’t experience any problems.

Server

The service is needed to open network drives and printers on a computer. Accordingly, if there is no network, the service can be disabled, and this is strongly recommended to increase security.

XP only: System restore service

Basically, if you disable recovery in your computer settings, the service will turn off itself. In addition, recovery can sometimes save a virus-ridden machine. If you feel the power of the Jedi, like me, turn it off. I have never needed this service in 10+ years.

Indexing service

Vista: Windows Search

Seven: Windows search

If you are not making a dump out of your computer and know perfectly well where everything is (and this is how it should be), turn it off. This service indexes all user files for search, and it can slow down the system at times. If the service is disabled, searching for files on the computer will still work, but much slower. I repeat, if you organize your work correctly, you don’t need to search for files at all.

SSDP discovery service

Vista/Seven: SSDP Discovery

Allows you to discover UPnP devices on the network. If you connected a router at home and your computer began to show it in the network environment as an “Internet Gateway” - this is it. And no one needs it at all.

XP only: Remote Access Service (Telnet)

Why remote access to your home machine? Only if you really need it.

Application layer gateway service

According to information, the service can be used by some third-party network monitors. I always turn it off and don’t experience any problems, incl. and with third-party firewalls.

IPsec services

Vista/Seven: IPsec Policy Agent

If your provider doesn’t indulge in VPN connections (or you don’t indulge in them yourself), feel free to disable it.

Terminal services

Seven: Remote Desktop Services

Ensuring fast user switching (see below) and remote access to a computer (remote desktop). If you don't need either one, turn it off. In Windows XP it definitely does not lead to any consequences, Vista/Seven - I have not tested it extensively.

XP only: Fast user switching compatibility

If there is only one user on your computer, you can disable it. In Windows XP this definitely does not lead to any problems; there is no separate service on Vista/Seven - apparently not provided.

XP only: Help and support

Has this "help" ever helped anyone?

Themes

I’ve never understood why themes are needed in operating systems, and I always work with the service disabled.

Remote registry

As follows from the description, it allows remote users to manipulate the registry on the computer. Of course, this is completely unnecessary for a home machine.

Security center

Constantly reminds you of what a conscious user already knows. An absolutely unnecessary thing for those who understand at least something about the system (and are reading this article).

What other services can be disabled?

DHCP Client

If your network connection is configured manually (has a static IP address), the service is not needed.

Windows audio

The name speaks for itself. If there is no sound on your computer (or you don’t need it), you can turn it off.

Windows time service

If you don't particularly care about time synchronization via the Internet, you can turn it off. However, I still prefer to synchronize the system time.

Windows Image Acquisition (WIA)

The service is designed to receive images from scanners, cameras, etc. If you do not directly connect device data (use it to copy memory cards), the service is not needed.

What services cannot be disabled, even if you really want to?

Event log

Vista/Seven: Windows Event Log

It seems that the service can be disabled painlessly - with the system configured, you never look at this log. However, I witnessed how when the service was disabled... The WiFi connection did not work. I don’t know how to explain this; I just remembered it for the rest of my life. Even if you don’t have WiFi, this doesn’t mean that this incident won’t manifest itself somewhere else.

Task scheduler

Vista/Seven: Task Scheduler

It would seem that if you do not use task scheduling (I, for example, almost never use it), then the service is not needed. However, in Windows XP, in addition to its main task, it also deals with the prefetch service - it creates special files in the /prefetch system directory, which can significantly speed up the loading of the operating system and programs. It is highly not recommended to disable it. I have no experience with Vista/Seven, because... they have a separate Superfetch service; Perhaps the scheduler can be disabled - but I won’t say so.

The remaining not very necessary services in all systems after installation have the “manual” boot type. That is, they do not start unnecessarily, but sometimes they may be needed - therefore, you should not disable them.

Application Layer Gateway Service - alg.exe

Location: WINDOWSystem32

Description: Application Layer Gateway Service (Application Layer Gateway Service)

Provides support for third party PnP protocols for Internet connection sharing and Internet connections using a firewall. This service is required when using Internet Firewall/Internet Sharing to connect to the Internet.

Default value: Manually

Dependencies on this service:

Internet Connection Firewall/Internet Connection Sharing

From the book Windows Registry author Klimov Alexander

W32Time Service W32Time is a built-in Microsoft Windows service that synchronizes an authorized time server with an external time source. An authorized time server is a domain controller that uses the W32Time service to keep date and time settings in sync.

From the book The C# 2005 Programming Language and the .NET 2.0 Platform. by Troelsen Andrew

Application-level exceptions (System.ApplicationException) Given that all .NET exceptions are class types, you can create your own application-specific exceptions. However, because the System.SystemException base class represents exceptions,

From the book DIY Linux server author Kolisnichenko Denis Nikolaevich

Building block-level (and module-level) attributes You can also specify that attributes apply to all types within a given module, or to all modules within a given building block, by using the or attributes, respectively. Let's assume that we

From the book TCP/IP Architecture, Protocols, Implementation (including IP version 6 and IP Security) by Faith Sydney M

10 Naming Service - DNS I think there is no need to talk once again about converting IP addresses into computer names and what the DNS service does. Entire volumes are devoted to this issue. Let's get straight to setting up the DNS server, which will work under

From the book Linux author Stakhnov Alexey Alexandrovich

17.1. Setting up the gateway First, let's define the functions that the gateway should perform: 1. Support communication with the provider.2. Routing IP packets between the local network and the Internet to allow local network users to access the Internet.3. Providing IP service.4. Local protection

From the book Undocumented and Little-Known Features of Windows XP author Klimenko Roman Alexandrovich

2.3.4 The WWW Word Wide Web (WWW) service is the most attractive system of all client/server application services implemented in TCP/IP. The user can access beautifully designed documents containing graphics and audio files and navigate easily

From the book Linux through the eyes of a hacker author Flenov Mikhail Evgenievich

2.4.3 DMS Naming Service Using network services requires a way to identify remote computers. Users and programs can identify the desired computer by its name, which is easy to remember or type. To create a connection to a host, the host name must be

From the book Information Technologies in the USSR. The creators of Soviet computer technology author Revich Yuri Vsevolodovich

Chapter 4 Physical and Data Link Technologies 4.1 Introduction Over the past few years, an unprecedented number of new technologies for local and regional networks have been proposed and quickly established themselves in the computer market. There has been a huge leap from

From the author's book

18.9 The WAIS Gopher Service makes many files available to users. However, users need a tool to search the archive for useful text documents. Most gopher servers have a search facility called the Wide

From the author's book

C.1.2 European NIC Service Main European NIC Service: RIPE Network Coordination Center (RIPE NCC) (Registry for the European Region) Email: [email protected], [email protected] Telephone: +31 20 592 5065 Fax: +31 20 592 5090 Postal address: RIPE NCCKruislaan 4091098 SJ Amsterdam The Netherlands Network Coordination Center

From the author's book

Chapter 30 Establishing an Internet gateway for a local network In this chapter, we will create an Internet access point for a local network. Typically, a dedicated line is used for this, at the ends of which modems are installed, connected to a serial port. IN

From the author's book

Indexing service The service is designed to index the contents of files on a local disk for the purpose of quick search using the ciadv.msc snap-in. The next chapter will discuss this equipment and working with it in detail, but for now let's talk about the service. Service

From the author's book

Messaging service The service manages the ability to send messages to network computers. If this service is disabled, programs that use it will not be able to send messages. In particular, the net send "computer" "message" command used by

From the author's book

Indexing Service Previously, the Indexing Service was discussed in terms of registry settings that affect its performance. Now we will look at the Indexing Service snap-in: how to use it to determine directories for indexing, as well as

From the author's book

9.1. Setting up a gateway You can access the Internet via a modem or a leased line. In Sect. 3.7 we have already briefly examined the possibility of connecting using a graphical utility that allows you to configure both types of connections. We will not dwell on this issue,

From the author's book

Service and war Anatoly was going to study atomic physics - although no one knew anything about the atomic bomb, it was clear that this science would be one of the most in demand for a long time. But the international tension hanging in the air made its own adjustments: he studied