How to find the Windows 10 service occupying 127.0.0.1:80?

Question

System administration

Help, please, to solve a problem. I've looked all over, but I couldn't figure it out.
To run the lab, you need a local web server that does not want to start in this situation.
The essence of the problem
No servers installed.

1. I open a browser, type in 127.0.0.1 and get
   
   
2. I run cmd.exe, netstat says that port 80 is occupied by a process with pid = 4. It is also System .
   
   

IIS is turned off completely (removed the root daw in the control panel).
In the registry HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HTTP key Start = 3 (required for print services to work; critical). (With Start = 4, you can start, but print services do not want to start)
What do you need?
Find and disable the service that occupies port 80.
What could be the reason

• IIS. On one of the items, ftp was raised via IIS. Perhaps some other component was installed, due to which this situation arose. And, at first, the localhost displayed the IIS page. BUT I removed the checkbox from the Control Panel with IIS, and 80 is still busy.
  
• I installed Denwer, then deleted it because IIS was loaded instead of Denwer domains.
  

Answer 1

move away from legacy Denver in favor of Open Server with assignment to any port

Answer 2

Hang up the server on other port, and all affairs.

Answer 3

The jackdaw was removed, but the process was never completed.
If you haven't rebooted, then restart your computer.
Or don't reboot and directly kill the process.
In cmd: taskkill /PID 4 /T
Will kill the process and all children.

Answer 4

I read the paper aloud. Expensive.

-b            Отображение исполняемого файла, участвующего в создании
               каждого подключения, или ожидающего порта. Иногда известные
               исполняемые файлы содержат множественные независимые
               компоненты. Тогда отображается последовательность компонентов,
               участвующих в создании подключения, либо ожидающий порт. В
               этом случае имя исполняемого файла находится снизу в скобках
               [], сверху - компонент, который им вызывается, и так до тех
               пор, пока не достигается TCP/IP. Заметьте, что такой подход
               может занять много времени и требует достаточных разрешений.

Answer 5

TCP Viewer by Sysinternals
Process Explorer by Sysinternals
autoruns by Sysinternals
explore, enjoy