发生频率:不定时,开机后常见
症状:Windows进程中explorer.exe持续占用Cpu,从12%到100%不等,任务管理器重启进程后占用率回落,processexplorer结束相关线程后占用率回落
相关线程:ntdll.dll!Rt1FreeUnicodeString+0x1370
其他信息:驱动已安装完全,Windows Search服务已禁用,系统盘为vhdx一级差分
systeminfo:
tasklist:
- 映像名称 PID 会话名 会话# 内存使用
- ========================= ======== ================ =========== ============
- System Idle Process 0 Services 0 4 K
- System 4 Services 0 612 K
- smss.exe 384 Services 0 1,032 K
- csrss.exe 516 Services 0 4,356 K
- csrss.exe 608 Console 1 40,872 K
- wininit.exe 616 Services 0 4,108 K
- winlogon.exe 644 Console 1 6,556 K
- services.exe 700 Services 0 5,596 K
- lsass.exe 708 Services 0 10,080 K
- svchost.exe 784 Services 0 9,948 K
- svchost.exe 824 Services 0 6,896 K
- dwm.exe 912 Console 1 28,196 K
- svchost.exe 928 Services 0 17,140 K
- svchost.exe 976 Services 0 29,688 K
- svchost.exe 1000 Services 0 17,336 K
- svchost.exe 456 Services 0 11,880 K
- svchost.exe 480 Services 0 32,256 K
- svchost.exe 1108 Services 0 20,672 K
- svchost.exe 1228 Services 0 12,672 K
- spoolsv.exe 1352 Services 0 9,708 K
- svchost.exe 1456 Services 0 6,528 K
- alg.exe 1984 Services 0 4,600 K
- taskhostex.exe 1568 Console 1 9,028 K
- svchost.exe 1924 Services 0 4,020 K
- explorer.exe 2320 Console 1 70,288 K
- IDMan.exe 2392 Console 1 15,104 K
- IEMonitor.exe 2452 Console 1 6,084 K
- notepad.exe 2556 Console 1 7,904 K
- IntelMeFWService.exe 2460 Services 0 3,772 K
- jhi_service.exe 2528 Services 0 4,436 K
- LMS.exe 2064 Services 0 9,884 K
- msdtc.exe 872 Services 0 6,904 K
- Taskmgr.exe 3024 Console 1 40,144 K
- firefox.exe 2704 Console 1 581,556 K
- 7zFM.exe 756 Console 1 15,052 K
- procexp.exe 1440 Console 1 7,224 K
- procexp64.exe 2992 Console 1 42,760 K
- explorer.exe 2288 Console 1 89,880 K
- cmd.exe 2052 Console 1 2,504 K
- conhost.exe 2896 Console 1 16,576 K
- mmc.exe 2796 Console 1 10,488 K
- tasklist.exe 1616 Console 1 5,816 K
- WmiPrvSE.exe 1548 Services 0 5,900 K
复制代码
schtasks:
sc query:
- SERVICE_NAME: ALG
- DISPLAY_NAME: Application Layer Gateway Service
- TYPE : 10 WIN32_OWN_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: AudioEndpointBuilder
- DISPLAY_NAME: Windows Audio Endpoint Builder
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: Audiosrv
- DISPLAY_NAME: Windows Audio
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: BFE
- DISPLAY_NAME: Base Filtering Engine
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: BITS
- DISPLAY_NAME: Background Intelligent Transfer Service
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: BrokerInfrastructure
- DISPLAY_NAME: Background Tasks Infrastructure Service
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: CryptSvc
- DISPLAY_NAME: Cryptographic Services
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: DcomLaunch
- DISPLAY_NAME: DCOM Server Process Launcher
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: DeviceAssociationService
- DISPLAY_NAME: Device Association Service
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: Dhcp
- DISPLAY_NAME: DHCP Client
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: Dnscache
- DISPLAY_NAME: DNS Client
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: DPS
- DISPLAY_NAME: Diagnostic Policy Service
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: EventLog
- DISPLAY_NAME: Windows Event Log
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: EventSystem
- DISPLAY_NAME: COM+ Event System
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: FontCache
- DISPLAY_NAME: Windows Font Cache Service
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: gpsvc
- DISPLAY_NAME: Group Policy Client
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, ACCEPTS_PRESHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: Intel(R) ME Service
- DISPLAY_NAME: Intel? ME Service
- TYPE : 10 WIN32_OWN_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: iphlpsvc
- DISPLAY_NAME: IP Helper
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: jhi_service
- DISPLAY_NAME: Intel(R) Dynamic Application Loader Host Interface Service
- TYPE : 10 WIN32_OWN_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: LanmanServer
- DISPLAY_NAME: Server
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: LanmanWorkstation
- DISPLAY_NAME: Workstation
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: lmhosts
- DISPLAY_NAME: TCP/IP NetBIOS Helper
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: LMS
- DISPLAY_NAME: Intel(R) Management and Security Application Local Management Service
- TYPE : 10 WIN32_OWN_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: LSM
- DISPLAY_NAME: Local Session Manager
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: MpsSvc
- DISPLAY_NAME: Windows Firewall
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: MSDTC
- DISPLAY_NAME: Distributed Transaction Coordinator
- TYPE : 10 WIN32_OWN_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: NcbService
- DISPLAY_NAME: Network Connection Broker
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: Netman
- DISPLAY_NAME: Network Connections
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: netprofm
- DISPLAY_NAME: Network List Service
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: NlaSvc
- DISPLAY_NAME: Network Location Awareness
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: nsi
- DISPLAY_NAME: Network Store Interface Service
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: PlugPlay
- DISPLAY_NAME: Plug and Play
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: Power
- DISPLAY_NAME: Power
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: ProfSvc
- DISPLAY_NAME: User Profile Service
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: RpcEptMapper
- DISPLAY_NAME: RPC Endpoint Mapper
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: RpcSs
- DISPLAY_NAME: Remote Procedure Call (RPC)
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: SamSs
- DISPLAY_NAME: Security Accounts Manager
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: Schedule
- DISPLAY_NAME: Task Scheduler
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: SENS
- DISPLAY_NAME: System Event Notification Service
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: SharedAccess
- DISPLAY_NAME: Internet Connection Sharing (ICS)
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: ShellHWDetection
- DISPLAY_NAME: Shell Hardware Detection
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: Spooler
- DISPLAY_NAME: Print Spooler
- TYPE : 110 WIN32_OWN_PROCESS (interactive)
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: stisvc
- DISPLAY_NAME: Windows Image Acquisition (WIA)
- TYPE : 10 WIN32_OWN_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, PAUSABLE, ACCEPTS_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: SystemEventsBroker
- DISPLAY_NAME: System Events Broker
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: Themes
- DISPLAY_NAME: Themes
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: TimeBroker
- DISPLAY_NAME: Time Broker
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: TrkWks
- DISPLAY_NAME: Distributed Link Tracking Client
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: UALSVC
- DISPLAY_NAME: User Access Logging Service
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, ACCEPTS_PRESHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: Wcmsvc
- DISPLAY_NAME: Windows Connection Manager
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: WinHttpAutoProxySvc
- DISPLAY_NAME: WinHTTP Web Proxy Auto-Discovery Service
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: Winmgmt
- DISPLAY_NAME: Windows Management Instrumentation
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, PAUSABLE, ACCEPTS_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: WinRM
- DISPLAY_NAME: Windows Remote Management (WS-Management)
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: WlanSvc
- DISPLAY_NAME: WLAN AutoConfig
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
- SERVICE_NAME: wudfsvc
- DISPLAY_NAME: Windows Driver Foundation - User-mode Driver Framework
- TYPE : 20 WIN32_SHARE_PROCESS
- STATE : 4 RUNNING
- (NOT_STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
- WIN32_EXIT_CODE : 0 (0x0)
- SERVICE_EXIT_CODE : 0 (0x0)
- CHECKPOINT : 0x0
- WAIT_HINT : 0x0
复制代码 dism /online /Get-Packages:
dism /online /Get-Driversdism /online /Get-Features
|