Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

The system is Windows 7, 32 bits. I have started only Thunderbird, Skype, 7 Sticky Notes and Look'n'Stop firewall.

5 minutes after system boot and full desktop load, I get a busy cursor, the windows which is in focus goes out of focus and the hard drive starts making noises (working). In Task Manager I can see some processes are getting started and stopped very fast. I'm assuming this is a windows task.

How can I find out what program started and it's path?

share|improve this question
1  
Did you check the superfetch service? It is a pre-loader, although should not have the symptoms the same as you described them. –  Psycogeek Oct 1 '13 at 7:33
    
SuperFetch was started. I did disabled it for now to see if it's going to behave the same on the next days. –  machineaddict Oct 3 '13 at 6:52
    
Apparently superfetch was the problem. Since I disabled it, I no longer have that behaviour. Thanks Psycogeek! –  machineaddict Nov 21 '13 at 11:49
add comment

2 Answers

You can type msconfig in run command

Browse startup tab

You can see list of things which gets started at process

share|improve this answer
    
I already told what programs are starting. I use emsisoft emergency kit to disable startup programs. It has a more advanced version of msconfig. –  machineaddict Oct 3 '13 at 11:42
    
@machineaddict i am not aware of it,thanks for pointing it out :) –  BlueBerry - vignesh4303 Oct 3 '13 at 11:48
add comment

You should use a more advanced version of task manager: ProcessExplorer. It will show you all the details you need:

enter image description here

It has several features that you'll find usefull:

  • It displays in a tree the approximate order in which processes execute each other (you'll know, which process launches your evil process)
  • When process closes, it is still displayed for several seconds as "deceased", so you'll have some time to look closer.
  • The data displayed on each process is, well... extensive at least.

You may also use AutoRuns which will show you all the apps that are set to start automatically in all the various places application may use in Windows OS

enter image description here

These are free tools, part of Windows SysInternals suite.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.