Main Forum > General Computer Support
Effect of "Restore Important Windows Services"
Boggin:
It's always difficult to nail down intermittent problems - no need to sit and watch it full time, just when you are using it normally.
It may be worth checking Event Viewer for anything for when this happens.
Samson:
As per the above suggestions, post a screenshot of the unknown window if/ when it shows up. Looking at your system tray you have a lot going on there, so the list of suspects is pretty big :wink:
It may be worth grabbing Shane's Tweaking.com - svchost.exe Lookup Tool. It is a small portable application that would give a clear indication of what process is running under svchost.exe when that unknown window appears and you can save the results for further investigation.
http://www.tweaking.com/content/page/tweaking_com_svchost_exe_lookup_tool.html
fjjr:
Thanks all. I will try to get some more data when it next happens.
fjjr:
It has now happened again, and from the event viewer it appears that it happened at about the same time as or only a few seconds after the adobe update service ran. The entries listed by the svchost.exe lookup tool were the same before, during and after the box opened - and I did think to have it open and have refreshed it already and then to refresh the list while the box was open and then again afterwards. There was no change in the total number of services and total number of instances of svc host running, and the entries showing in the lookup tool are copied below. I also upload herewith a copy of the screenprint I took of the box that opens, and a copy of the log file that I saved from the svchost.exe lookup tool. Any ideas?
--------------------------------------------------------------
Service Display Name: Automatic Updates
Service: wuauserv
PID: 1532
PID Memory: 50.46 MB
Path: C:\windows\system32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Background Intelligent Transfer Service
Service: BITS
PID: 1532
PID Memory: 50.46 MB
Path: C:\windows\system32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: COM+ Event System
Service: EventSystem
PID: 1532
PID Memory: 50.46 MB
Path: C:\windows\system32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Computer Browser
Service: Browser
PID: 1532
PID Memory: 50.46 MB
Path: C:\windows\system32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Cryptographic Services
Service: CryptSvc
PID: 1532
PID Memory: 50.46 MB
Path: C:\windows\system32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: DCOM Server Process Launcher
Service: DcomLaunch
PID: 1300
PID Memory: 05.66 MB
Path: C:\windows\system32\svchost -k DcomLaunch
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: DHCP Client
Service: Dhcp
PID: 1532
PID Memory: 50.46 MB
Path: C:\windows\system32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: DNS Client
Service: Dnscache
PID: 1652
PID Memory: 04.44 MB
Path: C:\windows\system32\svchost.exe -k NetworkService
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: ERSvc
Service: ERSvc
PID: 2224
PID Memory: 03.56 MB
Path: C:\windows\System32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Fast User Switching Compatibility
Service: FastUserSwitchingCompatibility
PID: 1532
PID Memory: 50.46 MB
Path: C:\windows\System32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Help and Support
Service: helpsvc
PID: 1532
PID Memory: 50.46 MB
Path: C:\windows\System32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Infrared Monitor
Service: Irmon
PID: 1532
PID Memory: 50.46 MB
Path: C:\windows\system32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Logical Disk Manager
Service: dmserver
PID: 1532
PID Memory: 50.46 MB
Path: C:\windows\System32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Network Connections
Service: Netman
PID: 1532
PID Memory: 50.46 MB
Path: C:\windows\System32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Network Location Awareness (NLA)
Service: Nla
PID: 1532
PID Memory: 50.46 MB
Path: C:\windows\system32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Remote Access Connection Manager
Service: RasMan
PID: 1532
PID Memory: 50.46 MB
Path: C:\windows\system32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Remote Procedure Call (RPC)
Service: RpcSs
PID: 1436
PID Memory: 05.88 MB
Path: C:\windows\system32\svchost -k rpcss
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Remote Registry
Service: RemoteRegistry
PID: 1784
PID Memory: 03.18 MB
Path: C:\windows\system32\svchost.exe -k LocalService
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Secondary Logon
Service: seclogon
PID: 1532
PID Memory: 50.46 MB
Path: C:\windows\System32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Security Center
Service: wscsvc
PID: 1532
PID Memory: 50.46 MB
Path: C:\windows\System32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Server
Service: LanmanServer
PID: 1532
PID Memory: 50.46 MB
Path: C:\windows\system32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Shell Hardware Detection
Service: ShellHWDetection
PID: 1532
PID Memory: 50.46 MB
Path: C:\windows\System32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: System Event Notification
Service: SENS
PID: 1532
PID Memory: 50.46 MB
Path: C:\windows\system32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: System Restore Service
Service: srservice
PID: 1532
PID Memory: 50.46 MB
Path: C:\windows\system32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Task Scheduler
Service: Schedule
PID: 1532
PID Memory: 50.46 MB
Path: C:\windows\System32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: TCP/IP NetBIOS Helper
Service: LmHosts
PID: 1784
PID Memory: 03.18 MB
Path: C:\windows\system32\svchost.exe -k LocalService
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Telephony
Service: TapiSrv
PID: 1532
PID Memory: 50.46 MB
Path: C:\windows\System32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Terminal Services
Service: TermService
PID: 1300
PID Memory: 05.66 MB
Path: C:\windows\System32\svchost -k DComLaunch
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Themes
Service: Themes
PID: 1532
PID Memory: 50.46 MB
Path: C:\windows\System32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: TrkWks
Service: TrkWks
PID: 3848
PID Memory: 03.21 MB
Path: C:\windows\system32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: WebClient
Service: WebClient
PID: 796
PID Memory: 03.90 MB
Path: C:\windows\system32\svchost.exe -k LocalService
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Windows Audio
Service: AudioSrv
PID: 1532
PID Memory: 50.46 MB
Path: C:\windows\System32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Windows Firewall/Internet Connection Sharing (ICS)
Service: SharedAccess
PID: 1532
PID Memory: 50.46 MB
Path: C:\windows\System32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Windows Image Acquisition (WIA)
Service: stisvc
PID: 3364
PID Memory: 06.80 MB
Path: C:\windows\system32\svchost.exe -k imgsvc
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Windows Management Instrumentation
Service: winmgmt
PID: 1532
PID Memory: 50.46 MB
Path: C:\windows\system32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Windows Time
Service: W32Time
PID: 1532
PID Memory: 50.46 MB
Path: C:\windows\System32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Wireless Zero Configuration
Service: WZCSVC
PID: 1532
PID Memory: 50.46 MB
Path: C:\windows\System32\svchost.exe -k netsvcs
--------------------------------------------------------------
--------------------------------------------------------------
Service Display Name: Workstation
Service: LanmanWorkstation
PID: 1532
PID Memory: 50.46 MB
Path: C:\windows\system32\svchost.exe -k netsvcs
--------------------------------------------------------------
Samson:
I don't use Adobe Reader, I have Flash Player (set to - "Ask to activate" in my browser) and have auto updates disabled. Check in Scheduled tasks if Adobe adds a task there to update. If it does then it it could be Task Scheduler causing that window, as it runs under svchost.exe
Navigation
[0] Message Index
[#] Next page
[*] Previous page
Go to full version