How to find what’s running under SVCHost.exe
My PC was behaving sluggishly the other day. I tried to be patient, but had to fire up the task manager when I could bear it no longer. That’s when I noticed great gobs of my swap file allocated to “SVCHOST.EXE”:
The problem is, SVCHOST is a catch all windows service container. Meaning, many windows services run under the same instance of SVCHOST. How was I going to figure out which services might be the culprit?
Enter the tasklist command.
Tasklist displays info about running tasks, including SVCHOST.
Simply running tasklist at the command prompt displays a laundry list of all running processes. This wasn’t going to do it, so I ran it with the “/?” switch to try and find how to narrow the info…
/SVC Displays services hosted in each process.
/FI filter Displays a set of tasks that match a given criteria specified by the filter.
Looks good so far, now I need to know what filter to apply:
Filters:
Filter Name Valid Operators Valid Value(s)
----------- --------------- --------------------------
IMAGENAME eq, ne Image name
OK, this gives us:
“C:\>tasklist /svc /FI “IMAGENAME EQ SCVHOST.EXE”
But it seems the filter is case sensitive, because when I run that command, I get this:
INFO: No tasks are running which match the specified criteria.
So, switching to lower case gives me what I want:
“C:\>tasklist /svc /FI “IMAGENAME EQ svchost.exe”
Image Name PID Services =========== ===== ======================= svchost.exe 744 DcomLaunch svchost.exe 844 RpcSs svchost.exe 888 AeLookupSvc, AppMgmt, AudioSrv, BITS, Browser, CryptSvc, dmserver, EventSystem,lanmanserver, lanmanworkstation, Netman, Nla, RasMan, Schedule, seclogon, SENS,ShellHWDetection, Themes, winmgmt, wuauserv svchost.exe 928 Dhcp, Dnscache svchost.exe 976 LmHosts, W32Time svchost.exe 1772 Net Driver HPZ12 svchost.exe 1816 Pml Driver HPZ12 svchost.exe 2424 TermService svchost.exe 3312 TapiSrv svchost.exe 2688 W3SVC
From there, it’s just a matter of shutting down or restarting each of the services listed under the process id 888 ( I got this from taskmanager).
Related Posts - 10 Useful, Often Overlooked HTML Tags. Pop quiz: When would you use the <wbr> tag, and what does it do? Yeah, I had no idea either. In fact, I had never even seen this tag before,...
- Arraylist and generics don't mix with IEnumerable(Of T).GetEnumerator. The other day I was writing an in-house tool to assist in some upgrades we were performing on client installations. This tool was supposed to perform its operations on a...
- Free Firewall Recommendations (Protect Yourself Online With These Free Firewalls) If your home computer is connected to the internet, or to other computers that are connected to the internet - you need a firewall. It's as simple as that. Hackers...
- The 3 Most Important Questions You Should Ask About Each Bug You Find. I stumbled upon (quite literally) an article by Tom Van Vleck titled Three Questions About Each Bug You Find today, and thought I would share it: "The key idea behind...
- Annoying "next message" behavior in Thunderbird, and how to stop it! I love the Thunderbird email client. I use the portable version on my thumb drive, but one thing has always bugged the hell out of me when I use it:...
Related Websites - The Unmatched Windows XP Broadband - Cable Tweaks Guide Does your connection crawl? I bet it does buddy, just try these few simple tweaks, lets get you fixed today. The following tweaks and modifications are the ones I personally perform to my Cable connection after fresh installing windows.Note-This Guide works with DSL and Cable Connections!The first thing I......
- Top 10 - SEO Do's & Don'ts SEO Do's Create a Useful, Content-Rich Website Properly Optimize Your Website Pages Have Relevant Websites Link to Your Website Analyze and Understand Your Website Statistics Revise Optimization Based on Feedback Create a Long-Term Content Strategy or Plan Do Learn Patience, Search Engine Success Takes Time Understand What Will and Will......
- Maintenance for your Swimming Pool On a humid and hot day in August, there is nothing that feels quite as good as a dip in your pool. If your pool is looking a little bit more like a pond than a place for swimming, then nobody is going to be happy. Here are some tips......
- SVCHOST.exe - What is it and why are there so many of them? I get asked this a lot. When you run Task Manager in XP and look at the process list, you see tons of svchost.exe processes running. You can't kill them (you don't really want to) and there's no obvious reason that there are so many of them. What are they? ......
- Tennis Scoring A game of tennis starts with the service and ends when a player has scored 4 points, as long as they are also 2 points ahead of their opponent. Games are generally part of a set, which is a series of games played until one player has reached six wins,......




