looking for logfile of programs that were started during system start

  • Thread starter Thread starter Marcel
  • Start date Start date
M

Marcel

Hello,

let me please ask something about msconfig
I started it to show which programs have been started during system start.
Quite a few, I admit. But can I also figure out WHEN they were started?
Think I'm looking for a kind of logfile of programs that were strarted
during system start.

Thanks,

Marcel
 
Marcel said:
Hello,

let me please ask something about msconfig
I started it to show which programs have been started during system start.
Quite a few, I admit. But can I also figure out WHEN they were started?
Think I'm looking for a kind of logfile of programs that were strarted
during system start.

Thanks,

Marcel


Hi Marcel,

You didn't mention your Windows version, edition and Service Pack level.
I'm using Windows XP, Professional, Service Pack 3, which includes some
tools and utilities that are not included by default in the Home edition.

I just tried Start> Run> msconfig
and on the Startup tab, I only have 8 items, 4 of which I added.
As far as I know all are necessary. The top down order they appear in that
startup tab appears to be the same order they start, as best I recall.

The Services tab shows both "Running" and "Stopped" services, in
alphabetical order. Only 3 of mine are marked Essential:
DCOM Server Process Launcher - Running
Remote Procedure Call (RPC) Locator - Stopped
Remote Procedure Call (RPC) - Running

Clicking on the Status column header to sort Running from Stopped:
There are 50 services Running.
There are 40 services Stopped.

Now, trying Start> Run> msinfo32
\System Summary
\Software Environment
\Running Tasks
That shows my same current 31 processes that Task Manager shows, but has a
Start Time column with Date-Time (mm/dd/yyyy hh:mm AM)
Generally speaking the start order in Task Manager is from the bottom up,
with System Idle Process starting first, then System, and so on.
(Task Manager = Ctrl+Alt+Del, or right-click clock and click Task Manager)

Next below Running Tasks in msinfo32 is Loaded Modules. No time info.

Next below that is Services, which shows the State (Running or Stopped),
and the Start Mode (Auto, Manual, or Disabled). No time info.

Next below that is Program Groups. (Apparently Start Menu stuff)

Next below that is Startup Programs with 12 items. The same 8 that were
shown in msconfig, and 4 desktop.ini items.

(Don't forget to try the Help button on the msinfo32 menu-bar! :)

With Processes tab of Task Manager displayed, on the menu bar click View,
Select Columns, and checkmark CPU Time and Virtual Memory Size. The System
Idle Process is opposite of other processes, it records cpu idle time, not
used time, and percentage of current cpu usage not being used. If you add
all the cpu times together, it is almost as much as the total time since
you last started your computer. (Zero times are fractions of a second.)

Switch to the Performance tab of Task Manager and double click graph.
(In other tabs like Applications, you can double click the thick border.)

If you are using Professional Edition, you can get other information here:
Start> Run> CMD
to start Command Prompt. Then:
(Select and copy these commands, right click in Command window and paste.)

CD %UserProfile%\Desktop
to Change Directories to your Desktop folder. Then:
tasklist /svc >taskSVC.txt
to send to your desktop a list of services started by tasks. And:
tasklist /M >taskDLL.txt
to send to your desktop a list of Dynamic Link Libraries tasks use. And:
tasklist /V >taskVerb.txt
for a verbose listing of task information.
(Note, that the DLL list has a lot of duplication.)

In Task Manager, I have 6 instances of the "svchost.exe" process, which is
the generic host for various services. Note, one is hosting 29 services:

svchost.exe - 704 DcomLaunch, TermService
svchost.exe - 772 RpcSs
svchost.exe - 808 AudioSrv, BITS, CryptSvc, Dhcp, dmserver,
ERSvc, EventSystem,
FastUserSwitchingCompatibility, helpsvc,
HidServ, LanmanServer, lanmanworkstation,
Netman, Nla, RasMan, Schedule, seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks, W32Time,
winmgmt, wscsvc, wuauserv, WZCSVC
svchost.exe - 864 Dnscache
svchost.exe - 924 Alerter, LmHosts, RemoteRegistry, SSDPSRV
svchost.exe - 1296 WebClient

Some of the service names have the letters "svc" as part of the name.
("HidServ" is not sneaky, but HID audio SERVice. :)

More information about TaskList:
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/tasklist.mspx

Users of XP Home Edition can download "tasklist.exe" here:
http://www.computerhope.com/download/winxp.htm
(Always check all downloads with your anti-virus software.)
The file is ready to use, just put it in your root C:\ folder.
Then at Command Prompt:
tasklist /?
to see a list of other commands available.
(Note: The WinXP Pro version of tasklist is in %windir%\system32 folder.)

Autoruns for Windows at Microsoft Technet site: "This utility, which has
the most comprehensive knowledge of auto-starting locations of any startup
monitor, shows you what programs are configured to run during system bootup
or login, and shows you the entries in the order Windows processes them.
These programs include ones in your startup folder, Run, RunOnce, and other
Registry keys. You can configure Autoruns to show other locations,
including Explorer shell extensions, toolbars, browser helper objects,
Winlogon notifications, auto-start services, and much more. Autoruns goes
way beyond the MSConfig utility bundled with Windows Me and XP."
http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx

HTH. (Hope This Helps. :)
--Richard
 
Leonard Grey said:

First, many thanks for your suggestion!

Well, I yielded an impressive 260 sec time for booting!

Today I am posting again because I am confused when looking at the detailed
results.

A large amount of programs is launched during start-up. I immediately admit
that some of them probably could be omitted. Nevertheless, their lauch takes
only small amount of time.

The big time consumers are the follwowing programs:

System (195 sec)

services.exe (180 sec)

svchost.exe (several times!)

explorer.exe (175 sec)

spoolsv.exe (163 sec)

avp.exe (167 sec, Kaspersky anti-virus)

HpqSRmon.exe (152 sec)

mDNSResponder.exe (91 sec)

hpqtra08.exe (174 sec)

jqs.exe (199 sec)

CCC.exe (51 sec)

GoogleUpdate.exe (146 sec)

RaUI.exe (150 sec)


My confusion is that when Windows XP programs like System, explorer.exe and
svchost.exe consume so much time, is there any way to accelerate start-up?


Thanks and best regards,


Marcel
 
Marcel said:
let me please add Windows XP home edition Service Pack 3

best regards, Marcel


Did you miss my other message? See reprint below:

Hi Marcel,

You didn't mention your Windows version, edition and Service Pack level.
I'm using Windows XP, Professional, Service Pack 3, which includes some
tools and utilities that are not included by default in the Home edition.

I just tried Start> Run> msconfig
and on the Startup tab, I only have 8 items, 4 of which I added.
As far as I know all are necessary. The top down order they appear in that
startup tab appears to be the same order they start, as best I recall.

The Services tab shows both "Running" and "Stopped" services, in
alphabetical order. Only 3 of mine are marked Essential:
DCOM Server Process Launcher - Running
Remote Procedure Call (RPC) Locator - Stopped
Remote Procedure Call (RPC) - Running

Clicking on the Status column header to sort Running from Stopped:
There are 50 services Running.
There are 40 services Stopped.

Now, trying Start> Run> msinfo32
\System Summary
\Software Environment
\Running Tasks
That shows my same current 31 processes that Task Manager shows, but has
a Start Time column with Date-Time (mm/dd/yyyy hh:mm AM)
Generally speaking the start order in Task Manager is from the bottom up,
with System Idle Process starting first, then System, and so on.
(Task Manager = Ctrl+Alt+Del, or right-click clock and click Task Manager)

Next below Running Tasks in msinfo32 is Loaded Modules. No time info.

Next below that is Services, which shows the State (Running or Stopped),
and the Start Mode (Auto, Manual, or Disabled). No time info.

Next below that is Program Groups. (Apparently Start Menu stuff)

Next below that is Startup Programs with 12 items. The same 8 that were
shown in msconfig, and 4 desktop.ini items.

(Don't forget to try the Help button on the msinfo32 menu-bar! :)

With Processes tab of Task Manager displayed, on the menu bar click View,
Select Columns, and checkmark CPU Time and Virtual Memory Size. The System
Idle Process is opposite of other processes, it records cpu idle time, not
used time, and percentage of current cpu usage not being used. If you add
all the cpu times together, it is almost as much as the total time since
you last started your computer. (Zero times are fractions of a second.)

Switch to the Performance tab of Task Manager and double click graph.
(In other tabs like Applications, you can double click the thick border.)

If you are using Professional Edition, you can get other information here:
Start> Run> CMD
to start Command Prompt. Then:
(Select and copy these commands, right click in Command window and paste.)

CD %UserProfile%\Desktop
to Change Directories to your Desktop folder. Then:
tasklist /svc >taskSVC.txt
to send to your desktop a list of services started by tasks. And:
tasklist /M >taskDLL.txt
to send to your desktop a list of Dynamic Link Libraries tasks use. And:
tasklist /V >taskVerb.txt
for a verbose listing of task information.
(Note, that the DLL list has a lot of duplication.)

In Task Manager, I have 6 instances of the "svchost.exe" process, which is
the generic host for various services. Note, one is hosting 29 services:

svchost.exe - 704 DcomLaunch, TermService
svchost.exe - 772 RpcSs
svchost.exe - 808 AudioSrv, BITS, CryptSvc, Dhcp, dmserver,
ERSvc, EventSystem,
FastUserSwitchingCompatibility, helpsvc,
HidServ, LanmanServer, lanmanworkstation,
Netman, Nla, RasMan, Schedule, seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks, W32Time,
winmgmt, wscsvc, wuauserv, WZCSVC
svchost.exe - 864 Dnscache
svchost.exe - 924 Alerter, LmHosts, RemoteRegistry, SSDPSRV
svchost.exe - 1296 WebClient

Some of the service names have the letters "svc" as part of the name.
("HidServ" is not sneaky, but HID audio SERVice. :)

More information about TaskList:
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/tasklist.mspx

Users of XP Home Edition can download "tasklist.exe" here:
http://www.computerhope.com/download/winxp.htm
(Always check all downloads with your anti-virus software.)
The file is ready to use, just put it in your root C:\ folder.
Then at Command Prompt:
tasklist /?
to see a list of other commands available.
(Note: The WinXP Pro version of tasklist is in %windir%\system32 folder.)

Autoruns for Windows at Microsoft Technet site: "This utility, which has
the most comprehensive knowledge of auto-starting locations of any
startup monitor, shows you what programs are configured to run during
system bootup or login, and shows you the entries in the order Windows
processes them. These programs include ones in your startup folder, Run,
RunOnce, and other Registry keys. You can configure Autoruns to show
other locations, including Explorer shell extensions, toolbars, browser
helper objects, Winlogon notifications, auto-start services, and much
more. Autoruns goes way beyond the MSConfig utility bundled with Windows
Me and XP."
http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx

HTH. (Hope This Helps. :)
--Richard
- - -
 
Did you miss my other message? See reprint below:


Richard,

yes, I did read your posting, thanks a lot.

Indeed, bootxp is able to reproduce the results of "onboard" tools.

I have arranged that some programs are not started anymore during booting.
That helps.

But my main question remains:

The "big time consumers" svhost.exe, explorer.exe are still there. Can
their start-up be accellerated?

Cheers,

Marcel
 
Back
Top