?
Solved

svchost.exe

Posted on 2003-02-26
3
Medium Priority
?
638 Views
Last Modified: 2010-04-13
Anyone know what's this program, which is just 8KB, and as a standard process takes 10+MB of memory?

0
Comment
Question by:piou
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
3 Comments
 
LVL 12

Accepted Solution

by:
guidway earned 200 total points
ID: 8028477
http://www.liutilities.com/products/wintaskspro/processlibrary/svchost/

svchost - svchost.exe - Process Information
Process File: svchost or svchost.exe
Process Name: Service Host Process
Description: The Service Host Process is generic host process for services that are run from dynamic-link libraries (DLLs)
Common Errors: N/A
System Process: Yes
0
 
LVL 12

Expert Comment

by:guidway
ID: 8028483
http://www.igknighttec.com/Windows/WindowsXP/svchost_exe.php

What is SVCHOST.EXE?

Svchost.exe is just an easy name to say. What this means is that you have services running from dynamic-link libraries (DLLs). The Svchost.exe file is located in the %SystemRoot%\System32 folder. At startup, Svchost.exe checks the services portion of the registry to construct a list of services that it needs to load. There can be multiple instances of Svchost.exe running at the same time.

Each Svchost.exe session can contain a grouping of services, so that separate services can be run depending on how and where Svchost.exe is started. This allows for better control and debugging.

Svchost.exe groups are identified in the following registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost

Each value under this key represents a separate Svchost group, and represents one instance of Svchost.exe. Each value is a REG_MULTI_SZ value and contains the services that run under that Svchost group. Each Svchost group can have more than one service_names extracted from the following registry key, whose Parameters key contains a ServiceDLL value:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ service

If you go to Start --> Run and type command, you can find out what the svchost.exe files corrispond to.

(Windows XP) Once you have the command line up, type Tasklist /SVC.
(Windows 2K) See end of page!

0
 
LVL 12

Expert Comment

by:guidway
ID: 8028500
for win2k:

Use Tlist.exe from the Windows 2000 CD-ROM; the syntax is tlist -s at the command prompt.
0

Featured Post

On Demand Webinar: Networking for the Cloud Era

Did you know SD-WANs can improve network connectivity? Check out this webinar to learn how an SD-WAN simplified, one-click tool can help you migrate and manage data in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
"Any files you do not have backed up in at least two [other] places are files you do not care about."
Do you want to know how to make a graph with Microsoft Access? First, create a query with the data for the chart. Then make a blank form and add a chart control. This video also shows how to change what data is displayed on the graph as well as form…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question