Tip

SVCHOST.exe, who are you?

Svchost is a generic host process that applications or host services run from DLLs. To find out what's inside each copy of svchost.exe, use the Resource Kit Support Tools tlist.exe (with the -s switch). You will need to install the Support Tools from supporttools on your product CD-ROM; they don't install by default. Below is sample output from the tlist command:

C:>tlist -s
0 System Process
4 System
176 smss.exe
208 csrss.exe Title:
172 winlogon.exe Title: NetDDE Agent
256 services.exe Svcs: Eventlog,PlugPlay
268 lsass.exe Svcs: Netlogon,PolicyAgent,ProtectedStorage,SamSs
320 svchost.exe Svcs: RpcSs
420 svchost.exe Svcs: AudioSrv,Browser,CryptSvc,Dhcp,dmserver,
EventSystem,FastUserSwitchingCompatibilityServices,helpsvc,HidServ,
lanmanserver,lanmanworkstation,Netman,Nla,Schedule,seclogon,SENS,
ShellHWDetection,TermService,ThemeService,TrkWks,uploadmgr,W32Time,
WmdmPmSp,wuauser
480 svchost.exe Svcs: Dnscache
500 svchost.exe Svcs: LmHosts,Messenger,RemoteRegistry,SSDPSRV,WebClient
544 spoolsv.exe Svcs: Spooler
660 DKService.exe Svcs: Diskeeper
800 svchost.exe Svcs: winmgmt
1092 explorer.exe Title: Program Manager
1244 ctfmon.exe Title:
900 ISATRAY.EXE Title: IsaTray
1344 NAVAPW32.EXE Title: Norton AntiVirus Auto-Protect
1212 FRONTPG.EXE Title: Microsoft FrontPage - D:asp 
www.ntfaq.comNTFAQ5apr2001.htm
428 NAVAPSVC.EXE Svcs: NAV Auto-Protect
1376 ALERTSVC.EXE Svcs: NAV Alert
1372 PowerDVD.exe Title: PowerDVD
444 OUTLOOK.EXE Title: Tasks - Microsoft Outlook
1268

Requires Free Membership to View

msmsgs.exe Title: 1436 MDM.EXE Title: OleMainThreadWndName 632 WINWORD.EXE Title: DDE Server Window 1404 IEXPLORE.EXE Title: Q250320 - Description of Svchost.exe - Microsoft Internet Explorer 1348 cmd.exe Title: E:WINDOWSSystem32cmd.exe - tlist -s 1428 tlist.exe

Many services, drivers and modules load at system startup and are essential to system operation. Even though they show up in Task Manager, they're still critical.

The svchosts are defined in the registry key HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionSvchost.

This tip was submitted to the SearchWin2000.com tip exchange by member Tim Fenner. Please let other users know how useful it is by rating it below.



This was first published in June 2003

There are Comments. Add yours.

 
TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

Disclaimer: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.