I'm having a problem with service process ID numbers changing on every startup and (some) being renamed with numeric suffixes. What happens is: I run Svchost Process Analyzer and it reports numerous 'atypical' files because a duplicate registry key has been created with the numeric suffix and there are no parameters in the key. The 'normal' process registry key still exists but when I use Process Explorer to review all this, the 'atypical' files reported by Svchost Process Analyzer have these duplicate startup locations in the registry. Here is an example:
svchost.exe 2172 --
CDPUserSvc_a4af01b -- Connected Devices Platform User Service_a4af01b
Svchost Analyzer reports:
File: <Registry key not found: HKLM\System\CurrentControlSet\Services\CDPUserSvc_a4af01b\Parameters> - The system cannot find the file specified | Status: active | Group: UnistackSvcGroup
From Process Explorer:
c:\windows\system32\svchost.exe -k unistacksvcgroup -s CDPUserSvc
Each time I boot, the numeric suffix changes and several Process ID numbers change. Almost all the 'atypical' svchost files reported by Svchost Process Analyzer have startup location: (Windows Push Notifications User Service) HKLM\System\CurrentControlSet\Services\WpnUserService_a4af01b (which has no parameters)
I've searched high and low for any answer to this and found nothing. The processes all run properly and there's no real problem with my machine... but something in all this looks like a virus or something buggy/corrupt in Windows. The PID numbers are starting to reach into the five digits -- Task Manager shows services with the numeric suffix below the normal named one, both as running, but the PID is assigned to the version with the numeric suffix.
Any insight would be great. Thanks in advance.