The Startup Info tab shows detailed information about what goes on when the operating system is started on a computer

To access the startup info, select ANALYZE > Computers > Computer Search, and search for a computer. Then, in the search results, click the name of the required computer, and then select the Startup Info tab.

Details for the last recorded startup of the computer is shown.

The first line in the table (OS Boot) isn't really a process, but it marks the first "life" of the operating system, just before the operating system starts to load drivers. The time of start for this event is set to zero, and the rest of the lines in the table have a time of start relative to this.
The table shows the following for each process:

Id: Process ID.
Time Start (s): Time when the process was started, measured in seconds relative to the start of the boot.
Time Delta (s): The number of seconds that the process was running before the next process started. Only processes started by system accounts are considered, which means that user processes will always have a zero time delta.
Process Name
Clock Time (s): The total number of seconds that the process had been running at the time when the startup report was gathered.
CPU Time: The amount of time that the process has used the computer's CPU, from the time it was started until the startup report was gathered.
Disk IO (Reads): Number of disk reads performed by the process.
Disk IO (Writes): Number of disk writes performed by the process.
Other IO (Ops.): Number of non-disk IO operations performed by the process.
Other IO (Bytes): Amount of bytes transferred by the process in non-disk IO.
Page Faults: Total number of page faults that the process has generated.
User: User and domain that owns the process.
Version: Version of the process.
Flags:
- 0: No information
- 1: The process is signed
- 2: The process signature is trusted
- 4: The process runs under Windows File Protection (WFP)
- 8: The process module has version information.
- 16: The process can be queried for process information
- 32: The process is a system process
- 64: The process hosts one or more services
- 128: The process was running when the report was created
Hosted Services: Names of services that the process hosts (if any), see the following.

The values for CPU, IO and Page Faults are the accumulated number of events or bytes during the total run time of the process, that is during the time indicated in the Clock Time column.

Processes that start together with the operating system, and terminate before the PerformanceGuard agent service has been started won't appear in the list because no trace of them is left in the operating system.

Hosted Services

For each process that hosts one or more Windows services, the list of hosted services is shown in the last column of the table. This can be quite useful, because some processes, such as svchost.exe, run a lot of different services. With the information in the last column you can thus determine exactly which services use resources when the operating system starts.

Search this documentation

On this page

In this section

Browser not supported