I disabled a service that was taking too much CPU on a regular basis, and now need to re-enable it, however, I can’t find it in my list of disabled processes (no disabled processes show up at all). How can I get this disabled service re-enabled? Is there a file that contains a blacklist somewhere that I can manually edit?
Sorry for the issue. Are you sure there is nothing typed into the search area at all? Please see how I clicked the “disabled” button in this example.
If you go to Events instead, does it show up if you search for it there?
Yes, I see the exact same screen that you sent on the apps page when I click the disabled button. I see no evidence of it in the Events page either, but when I attempt to run the service manually (double clicking on the exe from Windows file explorer), I get a Windows error dialog box with a fully qualified path to the executable in the dialog box title bar and the following error message “Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access this item.” If I rename the exe and then double click on it to run it, the exe executes.
Let me check in with our team and return, thanks for the details, and sorry for the issue.
I talked with our team and I found that this might be hitting a bug we had in the past versions where it could’ve marked the binary as no longer seen (so it doesn’t come up in the apps tab anymore) but kept the rule active, it is fixed in the new version but for your case you can do the reinstall with AppControlSetup.exe /clean to remove all his existing rules and this will resolve it. No need to uninstall, just installing on top of AppControl should solve it.
Download our latest version from www.appcontrol.com then open Command Prompt, then type “C:\Path\To\AppControlSetup.exe” /clean and press Enter.
“path\to” means the path to where the installer is on your PC.
In a highly unexpected turn of events, just before I wrote my last response to you, I renamed the process exe back to its original file name and left the AppControl window Apps tab Disabled list open. I then started typing my response and by the time I finished the message, when I came back to AppControl, the disabled process had magically reappeared in the list. I guess it just took a little while for AppControl to notice the hash matched as it didn’t appear immediately (otherwise I would’ve never placed this support ticket), but I’ve since re-enabled the process and all is well. Thanks for sending instructions that also would have done the job. And thanks for providing such an stellar app—it has been so helpful in helping me diagnose my computer’s behavior!
Strange. I wonder if there was a delay for our user interface to update somehow? We will try to reproduce this, because a delay on showing searches can be misleading and annoying so it’s good you found this issue.
May I ask the CPU/GPU of your PC?
@ SystemPulse
- What is the name of the exe?
- What was the name before you renamed it?
- Windows version?
I’m still evaluating AppControl on an expendable test system and would appreciate the info. I can try and reproduce the action on the exe, and then others, and report up here.
Thanks!
CPU: 11th Gen Intel i7-1180G7
GPU: Intel Iris Xe Graphics (integrated GPU)
I don’t think the issue was related to the CPU/GPU, though. It just so happens I created a VHDX of the Windows image using Disk2VHD before I noticed and corrected the problem on the original Windows host. When I went to boot up the old image under Hyper-V, the same issue happened there too (different CPU/GPU). My mind is a little hazy now, but while I tried the renaming trick, I didn’t see the process in the App tab immediately after renaming the process back to the original file name. I knew from fixing the problem on the original host that the process was unsigned and so I toggled the unsigned filter in AppControl; after doing this the process showed up immediately. I don’t recall what the original signed/unsigned filter state was to begin with, so I don’t really know if this had something to do with it or not.
Thanks @SystemPulse I will share with our team and see if they have more questions.