R
Russbunny
After our March patching, I have 2 services that show up on a WinServ2016 machine running Exchange.
CDPUserSvc_6c2663 - C:\Windows\system32\svchost.exe -k UnistackSvcGroup
CDPUserSvc_b0568b8 - C:\Windows\system32\svchost.exe -k UnistackSvcGroup
They both show up as Automatic start status, but they don't start. I researched to dig up what these even do, and couldn't find anything too definitive. I also found a lot of reports of these CDPUserSvc instances appearing on Windows 10 machines post-patching, but nothing really on them spawning on servers.
The server itself doesn't seem to be missing any functionality, but we don't want to go deleting services for no reason. Wondering if anyone has any thoughts on exactly what these services do or what generated these services. Thanks!
Continue reading...
CDPUserSvc_6c2663 - C:\Windows\system32\svchost.exe -k UnistackSvcGroup
CDPUserSvc_b0568b8 - C:\Windows\system32\svchost.exe -k UnistackSvcGroup
They both show up as Automatic start status, but they don't start. I researched to dig up what these even do, and couldn't find anything too definitive. I also found a lot of reports of these CDPUserSvc instances appearing on Windows 10 machines post-patching, but nothing really on them spawning on servers.
The server itself doesn't seem to be missing any functionality, but we don't want to go deleting services for no reason. Wondering if anyone has any thoughts on exactly what these services do or what generated these services. Thanks!
Continue reading...