Dat is veel omvattend kijk dit heb ik gevonden.
What is SVCHOST.EXE?
Svchost.exe is just an easy name to say. What this means is that you have services running from dynamic-link libraries (DLLs). The Svchost.exe file is located in the %SystemRoot%\System32 folder. At startup, Svchost.exe checks the services portion of the registry to construct a list of services that it needs to load. There can be multiple instances of Svchost.exe running at the same time.
Each Svchost.exe session can contain a grouping of services, so that separate services can be run depending on how and where Svchost.exe is started. This allows for better control and debugging.
Svchost.exe groups are identified in the following registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost
Each value under this key represents a separate Svchost group, and represents one instance of Svchost.exe. Each value is a REG_MULTI_SZ value and contains the services that run under that Svchost group. Each Svchost group can have more than one service_names extracted from the following registry key, whose Parameters key contains a ServiceDLL value:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ service
If you go to Start --> Run and type command, you can find out what the svchost.exe files corrispond to.
(Windows XP) Once you have the command line up, type Tasklist /SVC.
(Windows 2K) See end of page!
The following list is all the active programs on my computer.
Image Name PID Services
System Idle Process 0 N/A
System 4 N/A
smss.exe 484 N/A
csrss.exe 532 N/A
winlogon.exe 556 N/A
services.exe 604 Eventlog, PlugPlay
lsass.exe 616 PolicyAgent, ProtectedStorage, SamSs
svchost.exe 804 RpcSs
svchost.exe
876
AudioSrv, Browser, CryptSvc, Dhcp, dmserver,
EventSystem, FastUserSwitchingCompatibility,
helpsvc, lanmanserver, lanmanworkstation,
Messenger, Netman, Nla, RasAuto, RasMan,
Schedule, seclogon, SENS, ShellHWDetection,
srservice, TapiSrv, TermService, Themes,
TrkWks, uploadmgr, winmgmt, WmdmPmSp, WZCSVC
svchost.exe 960 Dnscache
spoolsv.exe 1156 Spooler
svchost.exe 1236 Alerter, WebClient
NAVAPSVC.EXE 1292 navapsvc
nvsvc32.exe 1304 NVSvc
svchost.exe 1476 stisvc
ups.exe 1500 UPS
explorer.exe 1832 N/A
devldr32.exe 3040 N/A
NAVAPW32.EXE 3120 N/A
ahqtb.exe 3068 N/A
AsusProb.exe 3624 N/A
cookie.exe 3644 N/A
razertra.exe 2668 N/A
wcescomm.exe 3356 N/A
razerofa.exe 732 N/A
pow.exe 2592 N/A
Smc.exe 1816 SmcService
UltraDev.exe 1828 N/A
IEXPLORE.EXE 3652 N/A
OUTLOOK.EXE 3556 N/A
ntvdm.exe 2848 N/A
winamp.exe 1104 N/A
cmd.exe 2296 N/A
tasklist.exe 2732 N/A
wmiprvse.exe 1808 N/A
*
)
.)
