Can someone help me identify these two "rogue"/blank system processes

I just built a new computer - and don't remember any blank entries on there before.

So I believe they popped up after i installed Hyper V in order to install Docker for Windows. i ended up uninstalling Docker for Windows - and all of the Hyper-V components / container components via some power shell commands that I found online.

I'm not getting any relate errors/critical events in Event Viewer - and when I click "properties" - it shows it as svchost.exe item - I've used systernals but I can't trace what exactly these processes are leading to or originating from.

There is nothing suspicious in the suspicious in my startup entry list, I've checked autoruns, and i don;'t know what else to do.

PS - I've also check the scheduled asks and didn't find anything unneeded/suspicious.


Any help would be appreciated

.

Open cmd prompt and type

Code:

tasklist /svc

.
What does that show for the svhost.exe entries that's not listed?

EDIT: Here's an even better command in the cmd prompt:

Code:

tasklist /svc /fi "imagename eq svchost.exe"

titetanium said:

Open cmd prompt and type

Code:

tasklist /svc

.
What does that show for the svhost.exe entries that's not listed?

EDIT: Here's an even better command in the cmd prompt:

Code:

tasklist /svc /fi "imagename eq svchost.exe"

Here is what the output of those commands are:

page2

bro67 said:

Download sysinternals Process Explorer from Microsoft.com, if you removed it and post a screenshot showing the sub processes for those two.

As for using process explorer - I have used it before, but not in this type of situation. Could you provide me further details, or point me in the right direction? I have looked at it using process explorer but am not well versed enough to know what I'm looking for.

Also, in Process Explorer, hovering the mouse pointer over a svchost.exe entry pops up a text box giving more information, including the particular service involved. (pointer doesn't show up in clip)

Attachment 218559

Right mouse click, then select Properties, gives even more information.

Attachment 218560

Hope this helps!

Thank you all for helping me - I was able trace the issue back to an XBOX app that MS installed to my computer automatically, that i had removed earlier using PowerShell. Although I do have an XBOX One, I felt that that the need to have an Xbox app on my computer would be redundant, for the simple reason that I bought my Xbox so that I would get off of my computer...

Well I left some stragglers laying around, hence, the empty process. I have since removed the two processes and everything is working as it should.

Thank you Ztrukerelaborating on how to use Process Explorer for my needs.

I see pid 3244 has n/a for one of the svchost.exe running. But that was all I can see from the cmd output you posted. Glad you sorted your issue out though.