Unusual service in Windows 10 RS1: CDPUserSvc

Discussion in 'Windows 10' started by hellodongfang, Aug 4, 2016.

  1. TairikuOkami

    TairikuOkami MDL Expert

    Mar 15, 2014
    1,172
    1,055
    60
    #21 TairikuOkami, Aug 5, 2016
    Last edited: Aug 5, 2016
    Clean Windows 10 install, browser takes 15 seconds to start, after applying tweaks, cold start takes 2 seconds. MS is sooo clever. :dance1:

    Windows by default is meant to be used by everyone, it is up to the user to customize it to his needs.
     
  2. RobertJ

    RobertJ MDL Senior Member

    Apr 4, 2014
    318
    79
    10
    #22 RobertJ, Aug 5, 2016
    Last edited: Aug 5, 2016
    True, Linux might not be an option for many games, but the vast majority aren't gamers. And as I said, previous versions of Windows will also suffice for most such users complaining about Win10, including those playing non-DX12 games.

    :) If that's how it's treated then that's cool, but I do see people making serious allegations and yet using the OS while desperately trying to tinker with it. :wallbash: is all that comes to mind in such instances.

    Simple customizing is a whole different thing compared to what I see people doing, which is yanking out internals of the OS and meddling with stuff they have no clue about. If they don't trust the OS (or Win10 in particular) then they shouldn't be using it, as simple as that. It's just plain common sense. And yet I see people with tin-foil hats on still using it and thinking by using some tools of dubious origin they have done a great job 'fixing' the OS. :rolleyes:
     
  3. dobbelina

    dobbelina MDL Senior Member

    Apr 2, 2009
    426
    526
    10
    I can definitively agree with that, but it's sure fun to abuse it in a virtual machine, playing with it's guts like a
    hobby surgeon :D
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. wendys

    wendys MDL Novice

    Jul 4, 2016
    2
    0
    0
    Hence why you set START in the mentioned registry keys to 4 (disable) - then those services, random number or not wont start at all - pay attention, will ya :clap:
     
  5. scaramonga

    scaramonga MDL Senior Member

    Oct 27, 2012
    426
    261
    10
    Oh but they do, and I'm paying great attention! :clap: Services keys are set to 4, and it just starts under a different ID, so I dunno what system you're running?, but this s**t just keeps on running, regardless :)
     
  6. Ace2

    Ace2 MDL Expert

    Oct 10, 2014
    1,414
    1,193
    60
    Only way i could stop CDPUserSvc_xxxxx was by taking ownership of C:\Windows\System32\CDPUserSvc.dll and renaming it to CDPUserSvc.dll.bak :g:
     
  7. dobbelina

    dobbelina MDL Senior Member

    Apr 2, 2009
    426
    526
    10
    #27 dobbelina, Aug 7, 2016
    Last edited: Aug 7, 2016
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  8. TairikuOkami

    TairikuOkami MDL Expert

    Mar 15, 2014
    1,172
    1,055
    60
    When you set the parent service to 4, child service will not run, regardless of its random number.
     
  9. Ace2

    Ace2 MDL Expert

    Oct 10, 2014
    1,414
    1,193
    60
    #29 Ace2, Aug 7, 2016
    Last edited by a moderator: Apr 20, 2017
    Disable with regedit:

    Code:
    Windows Registry Editor Version 5.00
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CDPUserSvc]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MessagingService]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OneSyncSvc]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PimIndexMaintenanceSvc]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UnistoreSvc]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UserDataSvc]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WpnUserService]
    "Start"=dword:00000004
    Save As... Disable_Service_xxxxx.reg

    Restart PC

    Delete with regedit:
    Code:
    Windows Registry Editor Version 5.00
    
    [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CDPUserSvc]
    
    [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MessagingService]
    
    [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OneSyncSvc]
    
    [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PimIndexMaintenanceSvc]
    
    [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UnistoreSvc]
    
    [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UserDataSvc]
    
    [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WpnUserService]
    Save As... Delete_Service_xxxxx.reg
     
  10. dobbelina

    dobbelina MDL Senior Member

    Apr 2, 2009
    426
    526
    10
    #30 dobbelina, Aug 8, 2016
    Last edited by a moderator: Apr 20, 2017
    I can confirm that this works, after re-boot the services stays disabled.
    This is also the preferred way of doing it as it's non-destructive.

    Funny that when you try to do this with services.msc, it throws an error and wont allow you to disable it :D
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  11. lobo11

    lobo11 TOMAHAWK CHOP

    Feb 16, 2012
    6,584
    5,362
    210
    If you ask me, your playing with fireo_O
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  12. dobbelina

    dobbelina MDL Senior Member

    Apr 2, 2009
    426
    526
    10
    I corrected my post, the "child services" wont start, i was wrong.
    It's enough to disable it's daddy :D
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  13. lobo11

    lobo11 TOMAHAWK CHOP

    Feb 16, 2012
    6,584
    5,362
    210
    Do you even know if this effects anything else in Windows 10 :confused:
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  14. dobbelina

    dobbelina MDL Senior Member

    Apr 2, 2009
    426
    526
    10
    #34 dobbelina, Aug 8, 2016
    Last edited: Aug 8, 2016
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  15. gnugeek

    gnugeek MDL Member

    Nov 23, 2009
    171
    41
    10
    Do you even believe Microsoft has any other objective besides spying?

    They even have SPY words in font size 200 as a framed canvas painting at the main entrance. So the employees who enter the campus know exactly what they are supposed to do whole day. Windows is just a byproduct.
     
  16. 100

    100 MDL Expert

    May 17, 2011
    1,349
    1,576
    60
    You just said that it's enough to disable the main service. Yes, that really looks like it would be incredibly hard to do.
    And, if you try to think a little about how those sub-services are instantiated, even the random name suffixes may begin to make sense to you.

    :doh:
     
  17. TairikuOkami

    TairikuOkami MDL Expert

    Mar 15, 2014
    1,172
    1,055
    60
    Just read through this topic, even people who know how to disable services had a hard time finding out how to do it, imagine common folks, who are accustomed to do via services.msc, like DiagTrack (the main service for spying), which was renamed, so online guides will only confuse people now, not to mention, it has been tight to apps and MS account, so they will not work properly without it.
     
  18. dobbelina

    dobbelina MDL Senior Member

    Apr 2, 2009
    426
    526
    10
    #40 dobbelina, Aug 8, 2016
    Last edited: Aug 8, 2016
    Sorry to hear that :weep:
    Personally I try to avoid destructive surgery when it isn't needed, as stopping these services seems
    to be sufficient, at least for now.
    Changing permissions on registry keys that only Trustedinstaller has access to, or throwing them away,
    is playing with fire :evil2:
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...