Sometimes, when my computer is frozen and just about unusable, it seems that the cause is some heavy background processing. Sometimes, I can catch who is using all my disk-bandwidth using Resource Monitor (such details are not shown in task manager). I suspect that this svchost.exe instance is really showing the activity of the service for Windows Update, but I am not sure if I can find out for sure.
Here's what I see:
Question is: What does LocalSystemNetworkRestricted mean, and can I associate an entry in Resource Overview that tells me it's svchost.exe with what service that is?
The good part is that the File column in the screenshot above (if expanded) tells you what actual file is being written or read, and this in turn has helped me with my theory that this is windows-update, and MSI-installations of windows-updates (which are probably subprocesses owned by the service) that are showing up as "svchost.exe (LocalSystemNetworkRestricted)", but I'd like to know for sure. If the file in question is the Pagefile, then my system is most likely being swamped by page-file reads/writes (known colloquially as My System is Thrashing, and needs more Physical RAM). But the cause, in the end, seems to be some windows service.
Update Not Windows Update, though, it turns out it's SuperFetch, a colossal Vista misfeature.