Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
  1. Home
  2. The Lounge
  3. How do I figure out what's running in a svchost process

How do I figure out what's running in a svchost process

Scheduled Pinned Locked Moved The Lounge
asp-netquestion
34 Posts 22 Posters 3 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • M Marc Clifton

    Jim Crafton wrote:

    Interesting, I don't have this at work. I wonder if this will show up on the home machine? I'm curious if others have this as well?

    Hell, I think I *wrote* it! Can't remember though, my resume is so cluttered with...ah, hmmm... back to designing satellites! Marc

    Will work for food. Interacx

    I'm not overthinking the problem, I just felt like I needed a small, unimportant, uninteresting rant! - Martin Hart Turner

    J Offline
    J Offline
    Jim Crafton
    wrote on last edited by
    #19

    Seriously? So what the hell does it do? Is it's name actually suggestive of its function, or is that just some amusing coincidence?

    ¡El diablo está en mis pantalones! ¡Mire, mire! SELECT * FROM User WHERE Clue > 0 0 rows returned Save an Orange - Use the VCF! Personal 3D projects Just Say No to Web 2 Point Blow

    M 1 Reply Last reply
    0
    • C Chris Losinger

      you need svchost_viewer[^]

      image processing toolkits | batch image processing

      D Offline
      D Offline
      Dan Neely
      wrote on last edited by
      #20

      From the screenshots that doesn't appear to do anything that process explorer doesn't ie identify *which* of the two dozen odd services inside was guzzling all my performance.

      3x12=36 2x12=24 1x12=12 0x12=18

      C 1 Reply Last reply
      0
      • D Dan Neely

        From the screenshots that doesn't appear to do anything that process explorer doesn't ie identify *which* of the two dozen odd services inside was guzzling all my performance.

        3x12=36 2x12=24 1x12=12 0x12=18

        C Offline
        C Offline
        Chris Losinger
        wrote on last edited by
        #21

        correct. this, or procexp, will answer the question you asked, when used in combination with taskman.

        image processing toolkits | batch image processing

        1 Reply Last reply
        0
        • R realJSOP

          > PornHubViewer And what the hell is that?

          .45 ACP - because shooting twice is just silly
          -----
          "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
          -----
          "The staggering layers of obscenity in your statement make it a work of art on so many levels." - J. Jystad, 2001

          A Offline
          A Offline
          AspDotNetDev
          wrote on last edited by
          #22

          I was about to post almost exactly that, but thought I'd check if anybody beat me to the punch. Seems you did. :thumbsup:

          [Forum Guidelines]

          1 Reply Last reply
          0
          • J Jim Crafton

            Seriously? So what the hell does it do? Is it's name actually suggestive of its function, or is that just some amusing coincidence?

            ¡El diablo está en mis pantalones! ¡Mire, mire! SELECT * FROM User WHERE Clue > 0 0 rows returned Save an Orange - Use the VCF! Personal 3D projects Just Say No to Web 2 Point Blow

            M Offline
            M Offline
            Marc Clifton
            wrote on last edited by
            #23

            Jim Crafton wrote:

            Seriously?

            No. :laugh: Marc

            Will work for food. Interacx

            I'm not overthinking the problem, I just felt like I needed a small, unimportant, uninteresting rant! - Martin Hart Turner

            1 Reply Last reply
            0
            • D Dan Neely

              I have one going bonkers on me eating a core for the last 15 minutes and generating 12k page faults/second over that time period (seems to be getting worse now). I'd like to pull the plug on it properly instead of just killing the process....

              3x12=36 2x12=24 1x12=12 0x12=18

              P Offline
              P Offline
              Paul Conrad
              wrote on last edited by
              #24

              I did:

              tasklist /svc /fi "imagename eq svchost.exe"

              and it returned all of the services being ran by my svchost.exe. I was curious about this for some time since it seems task manager has alot of instances of this image running.

              "The clue train passed his station without stopping." - John Simmons / outlaw programmer "Real programmers just throw a bunch of 1s and 0s at the computer to see what sticks" - Pete O'Hanlon "Not only do you continue to babble nonsense, you can't even correctly remember the nonsense you babbled just minutes ago." - Rob Graham

              D 1 Reply Last reply
              0
              • R realJSOP

                > PornHubViewer And what the hell is that?

                .45 ACP - because shooting twice is just silly
                -----
                "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                -----
                "The staggering layers of obscenity in your statement make it a work of art on so many levels." - J. Jystad, 2001

                P Offline
                P Offline
                peterchen
                wrote on last edited by
                #25

                Primary Object Redundancy Network Hub Viewer. You can cloud POR around a hub in your network to improve throughput, and the viewer shows you so. But then, there are people who are entertained by LVM_SORTITEMSEX[^]. for about five minutes.

                Personally, I love the idea that Raymond spends his nights posting bad regexs to mailing lists under the pseudonym of Jane Smith. He'd be like a super hero, only more nerdy and less useful. [Trevel]
                | FoldWithUs! | sighist | µLaunch - program launcher for server core and hyper-v server

                G 1 Reply Last reply
                0
                • P Paul Conrad

                  I did:

                  tasklist /svc /fi "imagename eq svchost.exe"

                  and it returned all of the services being ran by my svchost.exe. I was curious about this for some time since it seems task manager has alot of instances of this image running.

                  "The clue train passed his station without stopping." - John Simmons / outlaw programmer "Real programmers just throw a bunch of 1s and 0s at the computer to see what sticks" - Pete O'Hanlon "Not only do you continue to babble nonsense, you can't even correctly remember the nonsense you babbled just minutes ago." - Rob Graham

                  D Offline
                  D Offline
                  Dan Neely
                  wrote on last edited by
                  #26

                  That's not what I'm looking for since it provides no information about which of the 25 services inside the process had gone berserk.

                  3x12=36 2x12=24 1x12=12 0x12=18

                  1 Reply Last reply
                  0
                  • D Dan Neely

                    I have one going bonkers on me eating a core for the last 15 minutes and generating 12k page faults/second over that time period (seems to be getting worse now). I'd like to pull the plug on it properly instead of just killing the process....

                    3x12=36 2x12=24 1x12=12 0x12=18

                    S Offline
                    S Offline
                    Sashi Bhusan
                    wrote on last edited by
                    #27

                    SVCHOST expands to Services Host. It is a container process which runs a set of services. In order to find out what services are running under a svchost, you can download and install Process Explorer from the internet. Expand the SVCHOST and it should show you the services running under that SVCHOST process. If you want to maximize your system performance and if you see any particular SVCHOST process taking up lots of CPU, just find out the services hosted by this process with the help of above procedure. Once you are aware of the serice which is decreasing your CPU's performance. You can go ahead and stop that service( It is not suggested to do so, until and unless you are very sure what this service is responsible for). In order to stop a service. Open Run prompt and type "services.msc" and enter. This should give you all the list of services installed on your machine. Aftter this you can select a particular service and you can chose to stop it. Hope this Helps!! Thanks, Sashi.

                    1 Reply Last reply
                    0
                    • D Dan Neely

                      I have one going bonkers on me eating a core for the last 15 minutes and generating 12k page faults/second over that time period (seems to be getting worse now). I'd like to pull the plug on it properly instead of just killing the process....

                      3x12=36 2x12=24 1x12=12 0x12=18

                      P Offline
                      P Offline
                      Paul Sanders the other one
                      wrote on last edited by
                      #28

                      Process Explorer (see Google) will tell you what services are running in which invocation of svchost, and will also list the threads and open files of each process. You can get a stack trace of any thread, so if one is particularly busy you might be able to figuire out that it is doing.

                      Paul Sanders http://www.alpinesoft.co.uk

                      modified on Tuesday, December 8, 2009 8:09 AM

                      1 Reply Last reply
                      0
                      • P peterchen

                        Primary Object Redundancy Network Hub Viewer. You can cloud POR around a hub in your network to improve throughput, and the viewer shows you so. But then, there are people who are entertained by LVM_SORTITEMSEX[^]. for about five minutes.

                        Personally, I love the idea that Raymond spends his nights posting bad regexs to mailing lists under the pseudonym of Jane Smith. He'd be like a super hero, only more nerdy and less useful. [Trevel]
                        | FoldWithUs! | sighist | µLaunch - program launcher for server core and hyper-v server

                        G Offline
                        G Offline
                        Gary Wheeler
                        wrote on last edited by
                        #29

                        I have issued that message in an application, and I approved its use.

                        Software Zen: delete this;

                        1 Reply Last reply
                        0
                        • D Dan Neely

                          I have one going bonkers on me eating a core for the last 15 minutes and generating 12k page faults/second over that time period (seems to be getting worse now). I'd like to pull the plug on it properly instead of just killing the process....

                          3x12=36 2x12=24 1x12=12 0x12=18

                          S Offline
                          S Offline
                          stiphy31
                          wrote on last edited by
                          #30

                          In Windows 7 you can right click on the svchost.exe in task manager->processes and click "Go to Services." This will highlight the services that this svchost.exe process is hosting which will help track down the problem. I have been having a svchost.exe go nuts over the last week and used this technique to discover that it was smart card stuff that was causing it. I took a driver update for my smartcard reader and this I believe is what caused it. I just disabled it in device manager and haven't seen the problem since. Good diagnostic tool! Sean

                          1 Reply Last reply
                          0
                          • D Dan Neely

                            I have one going bonkers on me eating a core for the last 15 minutes and generating 12k page faults/second over that time period (seems to be getting worse now). I'd like to pull the plug on it properly instead of just killing the process....

                            3x12=36 2x12=24 1x12=12 0x12=18

                            D Offline
                            D Offline
                            dpminusa
                            wrote on last edited by
                            #31

                            Download this and try it. Has lots of tools and drill-downs. http://systemexplorer.mistergroup.org/[^]

                            "Coding for fun and profit ... mostly fun"

                            1 Reply Last reply
                            0
                            • D Dan Neely

                              I have one going bonkers on me eating a core for the last 15 minutes and generating 12k page faults/second over that time period (seems to be getting worse now). I'd like to pull the plug on it properly instead of just killing the process....

                              3x12=36 2x12=24 1x12=12 0x12=18

                              A Offline
                              A Offline
                              al_omari
                              wrote on last edited by
                              #32

                              My 6th grade son had the same on his computer and all software was even legal (windows, office, etc). I tried all possible solutions on the Internet and nothing solved it. At last, I solved it by restoring the machine to an earlier date before the problem appeared. Hussein Al-Hussein

                              Dr. Hussein Al-Omari al_omari@hotmail.com

                              1 Reply Last reply
                              0
                              • S SimulationofSai

                                Just hover your mouse over any svcutil, it'll list all the processes within. You can't drill down to each of internal process though.

                                SG Aham Brahmasmi!

                                C Offline
                                C Offline
                                CoolDadTx
                                wrote on last edited by
                                #33

                                But you can double click the svchost process to bring up the properties. Then switch to the Services tab to get the services running within it. Finally you can pause and stop each service from the dialog until the CPU utilization drops again.

                                1 Reply Last reply
                                0
                                • D Dan Neely

                                  AudioSrv BITS Browser CryptSvc Dhcp EventSystem helpsvc HidServ lanmanserver lanmanworkstation Netman Nla RasMan Schedule seclogon SENS SharedAccess ShellHWDetection srservice TapiSrv Themes TrkWks W32Time winmgmt wuauserv This was less enlightening than I'd expected it to be. :doh:

                                  3x12=36 2x12=24 1x12=12 0x12=18

                                  C Offline
                                  C Offline
                                  CalvinHobbies
                                  wrote on last edited by
                                  #34

                                  the biggest thing on my list is Turbine stuff for lord of the rings :rolleyes: I hope my computer leveled it's character as my turn is next soon. otherwise a bunch of services :~

                                  ///////////////// Groucho Marx Those are my principals, if you don't like them… I have others.

                                  1 Reply Last reply
                                  0
                                  Reply
                                  • Reply as topic
                                  Log in to reply
                                  • Oldest to Newest
                                  • Newest to Oldest
                                  • Most Votes


                                  • Login

                                  • Don't have an account? Register

                                  • Login or register to search.
                                  • First post
                                    Last post
                                  0
                                  • Categories
                                  • Recent
                                  • Tags
                                  • Popular
                                  • World
                                  • Users
                                  • Groups