Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
  1. Home
  2. The Lounge
  3. How do I figure out what's running in a svchost process

How do I figure out what's running in a svchost process

Scheduled Pinned Locked Moved The Lounge
asp-netquestion
34 Posts 22 Posters 1 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • D Dan Neely

    I have one going bonkers on me eating a core for the last 15 minutes and generating 12k page faults/second over that time period (seems to be getting worse now). I'd like to pull the plug on it properly instead of just killing the process....

    3x12=36 2x12=24 1x12=12 0x12=18

    R Offline
    R Offline
    Rama Krishna Vavilala
    wrote on last edited by
    #10

    Are you running Vista or Windows 7? If yes, it is extremely simple to figure out. In th task manager highlight the svchost.exe process, right click, and select "Got To Services". This will indicate all the services running on the svchost.exe process.

    Click here to get a Google Wave Invite.

    D 1 Reply Last reply
    0
    • D Dan Neely

      AudioSrv BITS Browser CryptSvc Dhcp EventSystem helpsvc HidServ lanmanserver lanmanworkstation Netman Nla RasMan Schedule seclogon SENS SharedAccess ShellHWDetection srservice TapiSrv Themes TrkWks W32Time winmgmt wuauserv This was less enlightening than I'd expected it to be. :doh:

      3x12=36 2x12=24 1x12=12 0x12=18

      L Offline
      L Offline
      Lost User
      wrote on last edited by
      #11

      http://www.speedyvista.com/services.php[^]

      1 Reply Last reply
      0
      • R Rama Krishna Vavilala

        Are you running Vista or Windows 7? If yes, it is extremely simple to figure out. In th task manager highlight the svchost.exe process, right click, and select "Got To Services". This will indicate all the services running on the svchost.exe process.

        Click here to get a Google Wave Invite.

        D Offline
        D Offline
        Dan Neely
        wrote on last edited by
        #12

        I'm still on XP at work. Vista has been under test for almost a year here, and supposedly the actual deployments will be Weven but I haven't heard anything ETAish on the subject.

        3x12=36 2x12=24 1x12=12 0x12=18

        1 Reply Last reply
        0
        • R Rajesh R Subramanian

          I too wonder what it is... It's running on my machine too.

          “Follow your bliss.” – Joseph Campbell

          X Offline
          X Offline
          Xiangyang Liu
          wrote on last edited by
          #13

          How come I don't have it? Where can I get it? :-D

          My .NET Business Application Framework My Home Page My Younger Son & His "PET"

          R 1 Reply Last reply
          0
          • D Dan Neely

            Where/how. It's GUI is somewhat lacking in usability...

            3x12=36 2x12=24 1x12=12 0x12=18

            S Offline
            S Offline
            SimulationofSai
            wrote on last edited by
            #14

            Just hover your mouse over any svcutil, it'll list all the processes within. You can't drill down to each of internal process though.

            SG Aham Brahmasmi!

            C 1 Reply Last reply
            0
            • D Dan Neely

              Where/how. It's GUI is somewhat lacking in usability...

              3x12=36 2x12=24 1x12=12 0x12=18

              R Offline
              R Offline
              Rama Krishna Vavilala
              wrote on last edited by
              #15

              You can right click on svchost.exe and click properties. There is a services tab on the properties dialog box that appears.

              Click here to get a Google Wave Invite.

              1 Reply Last reply
              0
              • D Dan Neely

                I have one going bonkers on me eating a core for the last 15 minutes and generating 12k page faults/second over that time period (seems to be getting worse now). I'd like to pull the plug on it properly instead of just killing the process....

                3x12=36 2x12=24 1x12=12 0x12=18

                C Offline
                C Offline
                Chris Losinger
                wrote on last edited by
                #16

                you need svchost_viewer[^]

                image processing toolkits | batch image processing

                D 1 Reply Last reply
                0
                • X Xiangyang Liu

                  How come I don't have it? Where can I get it? :-D

                  My .NET Business Application Framework My Home Page My Younger Son & His "PET"

                  R Offline
                  R Offline
                  Rajesh R Subramanian
                  wrote on last edited by
                  #17

                  I dunno. Mine came pre-installed with Windows 7 ultimate super duper special edition.

                  “Follow your bliss.” – Joseph Campbell

                  1 Reply Last reply
                  0
                  • J Jim Crafton

                    Interesting, I don't have this at work. I wonder if this will show up on the home machine? I'm curious if others have this as well?

                    ¡El diablo está en mis pantalones! ¡Mire, mire! SELECT * FROM User WHERE Clue > 0 0 rows returned Save an Orange - Use the VCF! Personal 3D projects Just Say No to Web 2 Point Blow

                    M Offline
                    M Offline
                    Marc Clifton
                    wrote on last edited by
                    #18

                    Jim Crafton wrote:

                    Interesting, I don't have this at work. I wonder if this will show up on the home machine? I'm curious if others have this as well?

                    Hell, I think I *wrote* it! Can't remember though, my resume is so cluttered with...ah, hmmm... back to designing satellites! Marc

                    Will work for food. Interacx

                    I'm not overthinking the problem, I just felt like I needed a small, unimportant, uninteresting rant! - Martin Hart Turner

                    J 1 Reply Last reply
                    0
                    • M Marc Clifton

                      Jim Crafton wrote:

                      Interesting, I don't have this at work. I wonder if this will show up on the home machine? I'm curious if others have this as well?

                      Hell, I think I *wrote* it! Can't remember though, my resume is so cluttered with...ah, hmmm... back to designing satellites! Marc

                      Will work for food. Interacx

                      I'm not overthinking the problem, I just felt like I needed a small, unimportant, uninteresting rant! - Martin Hart Turner

                      J Offline
                      J Offline
                      Jim Crafton
                      wrote on last edited by
                      #19

                      Seriously? So what the hell does it do? Is it's name actually suggestive of its function, or is that just some amusing coincidence?

                      ¡El diablo está en mis pantalones! ¡Mire, mire! SELECT * FROM User WHERE Clue > 0 0 rows returned Save an Orange - Use the VCF! Personal 3D projects Just Say No to Web 2 Point Blow

                      M 1 Reply Last reply
                      0
                      • C Chris Losinger

                        you need svchost_viewer[^]

                        image processing toolkits | batch image processing

                        D Offline
                        D Offline
                        Dan Neely
                        wrote on last edited by
                        #20

                        From the screenshots that doesn't appear to do anything that process explorer doesn't ie identify *which* of the two dozen odd services inside was guzzling all my performance.

                        3x12=36 2x12=24 1x12=12 0x12=18

                        C 1 Reply Last reply
                        0
                        • D Dan Neely

                          From the screenshots that doesn't appear to do anything that process explorer doesn't ie identify *which* of the two dozen odd services inside was guzzling all my performance.

                          3x12=36 2x12=24 1x12=12 0x12=18

                          C Offline
                          C Offline
                          Chris Losinger
                          wrote on last edited by
                          #21

                          correct. this, or procexp, will answer the question you asked, when used in combination with taskman.

                          image processing toolkits | batch image processing

                          1 Reply Last reply
                          0
                          • R realJSOP

                            > PornHubViewer And what the hell is that?

                            .45 ACP - because shooting twice is just silly
                            -----
                            "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                            -----
                            "The staggering layers of obscenity in your statement make it a work of art on so many levels." - J. Jystad, 2001

                            A Offline
                            A Offline
                            AspDotNetDev
                            wrote on last edited by
                            #22

                            I was about to post almost exactly that, but thought I'd check if anybody beat me to the punch. Seems you did. :thumbsup:

                            [Forum Guidelines]

                            1 Reply Last reply
                            0
                            • J Jim Crafton

                              Seriously? So what the hell does it do? Is it's name actually suggestive of its function, or is that just some amusing coincidence?

                              ¡El diablo está en mis pantalones! ¡Mire, mire! SELECT * FROM User WHERE Clue > 0 0 rows returned Save an Orange - Use the VCF! Personal 3D projects Just Say No to Web 2 Point Blow

                              M Offline
                              M Offline
                              Marc Clifton
                              wrote on last edited by
                              #23

                              Jim Crafton wrote:

                              Seriously?

                              No. :laugh: Marc

                              Will work for food. Interacx

                              I'm not overthinking the problem, I just felt like I needed a small, unimportant, uninteresting rant! - Martin Hart Turner

                              1 Reply Last reply
                              0
                              • D Dan Neely

                                I have one going bonkers on me eating a core for the last 15 minutes and generating 12k page faults/second over that time period (seems to be getting worse now). I'd like to pull the plug on it properly instead of just killing the process....

                                3x12=36 2x12=24 1x12=12 0x12=18

                                P Offline
                                P Offline
                                Paul Conrad
                                wrote on last edited by
                                #24

                                I did:

                                tasklist /svc /fi "imagename eq svchost.exe"

                                and it returned all of the services being ran by my svchost.exe. I was curious about this for some time since it seems task manager has alot of instances of this image running.

                                "The clue train passed his station without stopping." - John Simmons / outlaw programmer "Real programmers just throw a bunch of 1s and 0s at the computer to see what sticks" - Pete O'Hanlon "Not only do you continue to babble nonsense, you can't even correctly remember the nonsense you babbled just minutes ago." - Rob Graham

                                D 1 Reply Last reply
                                0
                                • R realJSOP

                                  > PornHubViewer And what the hell is that?

                                  .45 ACP - because shooting twice is just silly
                                  -----
                                  "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                                  -----
                                  "The staggering layers of obscenity in your statement make it a work of art on so many levels." - J. Jystad, 2001

                                  P Offline
                                  P Offline
                                  peterchen
                                  wrote on last edited by
                                  #25

                                  Primary Object Redundancy Network Hub Viewer. You can cloud POR around a hub in your network to improve throughput, and the viewer shows you so. But then, there are people who are entertained by LVM_SORTITEMSEX[^]. for about five minutes.

                                  Personally, I love the idea that Raymond spends his nights posting bad regexs to mailing lists under the pseudonym of Jane Smith. He'd be like a super hero, only more nerdy and less useful. [Trevel]
                                  | FoldWithUs! | sighist | µLaunch - program launcher for server core and hyper-v server

                                  G 1 Reply Last reply
                                  0
                                  • P Paul Conrad

                                    I did:

                                    tasklist /svc /fi "imagename eq svchost.exe"

                                    and it returned all of the services being ran by my svchost.exe. I was curious about this for some time since it seems task manager has alot of instances of this image running.

                                    "The clue train passed his station without stopping." - John Simmons / outlaw programmer "Real programmers just throw a bunch of 1s and 0s at the computer to see what sticks" - Pete O'Hanlon "Not only do you continue to babble nonsense, you can't even correctly remember the nonsense you babbled just minutes ago." - Rob Graham

                                    D Offline
                                    D Offline
                                    Dan Neely
                                    wrote on last edited by
                                    #26

                                    That's not what I'm looking for since it provides no information about which of the 25 services inside the process had gone berserk.

                                    3x12=36 2x12=24 1x12=12 0x12=18

                                    1 Reply Last reply
                                    0
                                    • D Dan Neely

                                      I have one going bonkers on me eating a core for the last 15 minutes and generating 12k page faults/second over that time period (seems to be getting worse now). I'd like to pull the plug on it properly instead of just killing the process....

                                      3x12=36 2x12=24 1x12=12 0x12=18

                                      S Offline
                                      S Offline
                                      Sashi Bhusan
                                      wrote on last edited by
                                      #27

                                      SVCHOST expands to Services Host. It is a container process which runs a set of services. In order to find out what services are running under a svchost, you can download and install Process Explorer from the internet. Expand the SVCHOST and it should show you the services running under that SVCHOST process. If you want to maximize your system performance and if you see any particular SVCHOST process taking up lots of CPU, just find out the services hosted by this process with the help of above procedure. Once you are aware of the serice which is decreasing your CPU's performance. You can go ahead and stop that service( It is not suggested to do so, until and unless you are very sure what this service is responsible for). In order to stop a service. Open Run prompt and type "services.msc" and enter. This should give you all the list of services installed on your machine. Aftter this you can select a particular service and you can chose to stop it. Hope this Helps!! Thanks, Sashi.

                                      1 Reply Last reply
                                      0
                                      • D Dan Neely

                                        I have one going bonkers on me eating a core for the last 15 minutes and generating 12k page faults/second over that time period (seems to be getting worse now). I'd like to pull the plug on it properly instead of just killing the process....

                                        3x12=36 2x12=24 1x12=12 0x12=18

                                        P Offline
                                        P Offline
                                        Paul Sanders the other one
                                        wrote on last edited by
                                        #28

                                        Process Explorer (see Google) will tell you what services are running in which invocation of svchost, and will also list the threads and open files of each process. You can get a stack trace of any thread, so if one is particularly busy you might be able to figuire out that it is doing.

                                        Paul Sanders http://www.alpinesoft.co.uk

                                        modified on Tuesday, December 8, 2009 8:09 AM

                                        1 Reply Last reply
                                        0
                                        • P peterchen

                                          Primary Object Redundancy Network Hub Viewer. You can cloud POR around a hub in your network to improve throughput, and the viewer shows you so. But then, there are people who are entertained by LVM_SORTITEMSEX[^]. for about five minutes.

                                          Personally, I love the idea that Raymond spends his nights posting bad regexs to mailing lists under the pseudonym of Jane Smith. He'd be like a super hero, only more nerdy and less useful. [Trevel]
                                          | FoldWithUs! | sighist | µLaunch - program launcher for server core and hyper-v server

                                          G Offline
                                          G Offline
                                          Gary Wheeler
                                          wrote on last edited by
                                          #29

                                          I have issued that message in an application, and I approved its use.

                                          Software Zen: delete this;

                                          1 Reply Last reply
                                          0
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Don't have an account? Register

                                          • Login or register to search.
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags
                                          • Popular
                                          • World
                                          • Users
                                          • Groups