You can look under scheduled tasks, too. I just noticed a daily command line job I have running from there showed up as svchost in the title bar of the command window. Might be a long shot, but anything beats having to flatline a drive, imo.
__________________
|