Process Explorer, from Sysinternals, is a process management program that allows you to see the running processes on your computer and a great deal of information about each process. Outlined below are three methods, depending on your Windows version, to see what services a SVCHOST.EXE process is controlling on your computer as well as some advanced technical knowledge about svchost for those who are interested.ĭetermining the services running under a SVCHOST.EXE process using Process Explorer Each time you see a SVCHOST process, it is actually a process that is managing one or more distinct Windows DLL services. In this situation, the launcher for DLL services is SVCHOST.EXE, otherwise known as the Generic Host Process for Win32 Services. As Windows has no direct way of executing a DLL file it needs a program that can act as a launcher for these types of programs. For the most part Windows services are executable (.EXE) files, but some services are DLL files as well.

For those familiar with Unix/Linux operating systems, Windows services are similar to *nix daemons. Services are Windows programs that start when Windows loads and that continue to run in the background without interaction from the user. Before we continue learning about SVCHOST, lets get a small primer on Windows services. This tutorial will clear up this confusion and provide information as to what these processes are and how to find out more information about them. The confusion typically stems from a lack of knowledge about SVCHOST.EXE, its purpose, and Windows services in general. Watch the Windows Vista and Windows 7 SVCHOST companion video here!Ī very common question we see here at Bleeping Computer involves people concerned that there are too many SVCHOST.EXE processes running on their computer.

Watch the Windows XP SVCHOST companion video here!

Determining the services running under a SVCHOST.EXE process in Windows 8.

Determining the services running under a SVCHOST.EXE process in Windows Vista and Windows 7.

Determining the services running under a SVCHOST.EXE process using TaskList.

Determining the services running under a SVCHOST.EXE process using Process Explorer.

What programs running on startup