When you open the Processes in Windows 7 Task Manager or the Details tab in Windows 8 Task Manager, you will be surprised to see how many processes svchost.exe they run. Today, we'll see why Windows needs so many SVCHOST processes and how you can determine which svchost process runs which service groups.
The svchost.exe (host service) file is located in the C: \ Windows \ System32 folder and is used to run various system services. Here is an official file description from Microsoft:
The Svchost.exe file is located in the% SystemRoot% \ System32 folder. At startup, the Svchost.exe file checks the registry service section to create a list of services to load. Multiple views of Svchost.exe can be executed simultaneously. Each Svchost.exe session may contain a service group. Therefore, they can run separate services, depending on how and where Svchost.exe starts. This service grouping allows for better control and easier debugging.
The Svchost.exe groups are identified by the following registry key:
HKEY_LOCAL_MACHINE \Software\Microsoft\WindowsNT\CurrentVersion\Svchost
Each value below this key represents a separate Svchost group and is displayed as a separate process when viewing the active processes. Each value is a REG_MULTI_SZ value and contains the services running in this Svchost group. Each Svchost group may contain one or more service names extracted from the following registry key whose parameters contain a ServiceDLL value:
HKEY_LOCAL_MACHINE \ System \ CurrentControlSet \ Services \ Service
So, as a result of grouping services, we have many cases of running Svchost.exe.
Let's see how you can see which services run on a specific run of svchstst.exe.
Option One: From Task Manager
The built-in Windows tool, Task Manager, is able to show you additional information about the services associated with the selected svchstst process.
Open Task Manager by pressing Shift + Ctrl + Esc on your keyboard or right-clicking on an empty area of the taskbar.
In Windows 7 or Vista, go to the Processes tab. In Windows 8, 8.1, you should go to the Details tab.
Right click on the desired process. Suppose a certain svchost.exe consumes a lot μνήμη και θέλετε να μάθετε ποια service το χρησιμοποιεί. Κάντε κλικ σε αυτό το svchοst.exe και επιλέξτε Μετάβαση στην υπηρεσία (ες). Η καρτέλα Υπηρεσίες θα ανοίξει αυτόματα και όλες οι υπηρεσίες που χρησιμοποιούν το συγκεκριμένο svchοst.exe θα είναι επισημασμένες.
Option Two: From the Command Line.
Open a Command Prompt window and type the following:
tasklist /svc
It will show you a list of all svchost processes along with related services.
This method is very useful in Windows XP, where the application Task Manager δεν έχει το χαρακτηριστικό "Πηγαίνετε στην υπηρεσία (ες)."
Now you know why so many svchost.exe processes run on your Windows system.
