When you open the Processes tab in Windows 7 Task Manager or the Details tab in Task Manager of Windows 8, you will be surprised to see how many processes svchost.exe they run. Today, we'll see why Windows needs so many SVCHOST processes and how you can determine which svchost process runs which service groups.
The file svchost.exe (host service) is located in the C:\Windows\System32 folder and is used to run various system services. Here is an official description of the file from Microsoft:
The Svchost.exe file is located in the% SystemRoot% \ System32 folder. At startup, the Svchost.exe file checks the registry service section to create a list of services to load. Multiple views of Svchost.exe can be executed simultaneously. Each Svchost.exe session may contain a service group. Therefore, they can run separate services, depending on how and where Svchost.exe starts. This service grouping allows for better control and easier debugging.
The Svchost.exe groups are identified by the following registry key:
HKEY_LOCAL_MACHINE \ Software \ Microsoft \ WindowsNT \ CurrentVersion \ Svchost
Each price under this key represents a separate Svchost group and appears as a separate process when you view active processes. Each value is a REG_MULTI_SZ value and contains the services running in this Svchost group. Each Svchost group can contain one or more service names derived from the following registry key, whose parameters contain a ServiceDLL value:
HKEY_LOCAL_MACHINE \ System \ CurrentControlSet \ Services \ Service
So, as a result of grouping services, we have many cases of running Svchost.exe.
Let's see how you can see which services run on a specific run of svchstst.exe.
Option One: From Task Manager
The built-in Windows tool, Task Manager, is able to show you additional information about the services associated with the selected svchstst process.
Open Task Manager by pressing Shift + Ctrl + Esc on your keyboard or right-clicking on an empty area of the taskbar.
In Windows 7 or Vista, go to the Processes tab. In Windows 8, 8.1, you should go to the Details tab.
Κάντε δεξί κλικ στην επιθυμητή διαδικασία. Ας υποθέσουμε ότι κάποιο συγκεκριμένο svchοst.exe καταναλώνει πολλή μνήμη και θέλετε να μάθετε ποια service το χρησιμοποιεί. Κάντε κλικ σε αυτό το svchοst.exe και επιλέξτε Μετάβαση στην υπηρεσία (ες). Η καρτέλα Υπηρεσίες θα ανοίξει αυτόματα και όλες οι υπηρεσίες που χρησιμοποιούν το συγκεκριμένο svchοst.exe θα είναι επισημασμένες.
Option Two: From the Command Line.
Open a Command Prompt window and type the following:
tasklist / svc
It will show you a list of all svchost processes along with related services.
This method is very useful in Windows XP, where the application Task Manager does not have the “Go to Service(s)” feature.
Now you know why so many svchost.exe processes run on your Windows system.
