How to monitor programs and services on Windows startup?

3

2

I am looking for a way to have a kind of a simple --verbose log of all programs and services activities on Windows (XP, Vista, 7, 8, 10, etc.) startup.

Ideally it would show the name (and path), the memory allocated, the starting and ending runtime and the services that invoked (if it's an application), but I would be glad as well with just a names log.

It may be as simple as a command that is run before all the non-core windows stuff that can dump > startup_services.log and > startup_apps.log (probably would stop logging 2-3 minutes after booting). Is there such a thing already in the cmd line that can be used for this purpose?

Edit

This question was being marked as duplicate of another one, but that question has an answer for one part of my question: boot logging processes. I wanted as well a services log and if possible a simple way to save the log. David's answer below provided other ways to achieve this, and one of them generates the log to a CSV file, which in some cases is preferable to the heavy .PML files generated by the Process Monitor (PM) that can only be opened by the PM itself.

Armfoot

Posted 2015-06-20T13:28:40.953

Reputation: 175

If you want a list of programs and services that run at startup have you taken a look at Autoruns already?

– Karan – 2015-06-20T13:32:16.173

@Karan thanks Karan, but I have seen many of these kind of tools that are able to (de)activate auto-start entries, but none of those I found is able to create a simple log of one startup... – Armfoot – 2015-06-20T13:37:08.100

1

Windows services starting up are logged as events in System Event log. See Are there any log file about Windows Services Status?

– DavidPostill – 2015-06-20T13:56:25.860

@DavidPostill Oh! I remember this one! It's not very easy to get a simple log from it though, but I appreciate it David! – Armfoot – 2015-06-20T14:13:26.620

possible duplicate of How to find what is causing Windows 7 Desktop pause

– DavidPostill – 2015-06-20T14:27:06.983

Answers

4

How do I monitor programs and services on Windows startup?

Windows services starting up are logged as events in the System Event log.


Disclaimer

I am not affiliated with any of the above software products in any way, I am just an end user of the software.

I've no idea how many of them will work on older version of Windows.

DavidPostill

Posted 2015-06-20T13:28:40.953

Reputation: 118 938

I just restarted my pc after enabling Boot logging in the Process Monitor as music2myear described and the log it far more complete than I ever expected it to be (I also chose to enable thread profilling every 1 sec). It's amazing the amount of junk programs that I was able to find that still linger, even after using startup managers... Thanks for the link and all the other alternatives as well David, but I can see that the Process Monitor is the most powerful/organized solution for this :)

– Armfoot – 2015-06-20T15:01:15.027

2

The command tasklist in Windows Command Prompt shows a static snapshot of all running programs and services, but it sounds like you need a process monitoring program. Sysinternals.com (on Microsoft Technet) has a free process monitor you can customize with your own filtering rules.

Sysinternals.com also has a Startup Monitor called Autoruns (also on Microsoft Technet) which may suit your needs more specifically than a regular process monitor.

Floofies

Posted 2015-06-20T13:28:40.953

Reputation: 167

+1 Floofies, I am running Process Monitor and it does have a very complete log of the latest activities (not for services though...), its filters are particularly good. Do you know how to run it right at startup (and possibly making it stop capturing events and save the PML after 2 minutes;)? – Armfoot – 2015-06-20T14:05:41.157

1Process Monitor comes with a very useful helpfile, "procmon.chm", which contains documentation for command line options, scripting, and Boot Logging information. It is possible to create a startup script which automatically saves logs, and terminates Process Monitor when you no longer need it to run. – Floofies – 2015-06-20T14:19:57.743

1

@Armfoot How to find what is causing Windows 7 Desktop pause

You can use Process Monitor (from SysInternals/Microsoft) to track your boot time and provide a dump file of all system and file activity during the boot process.

– DavidPostill – 2015-06-20T14:24:31.303

1

@Armfoot How To Enable System Boot Time Logging using Process Monitor Tool

– DavidPostill – 2015-06-20T14:24:36.967

@DavidPostill well, it seems like a bullseye shot :D thanks guys! – Armfoot – 2015-06-20T14:27:17.047