{"id":895,"date":"2009-05-02T11:50:30","date_gmt":"2009-05-02T06:20:30","guid":{"rendered":"http:\/\/198.58.113.91\/blog\/?p=895"},"modified":"2022-08-08T08:48:46","modified_gmt":"2022-08-08T03:18:46","slug":"services-svchost-windows","status":"publish","type":"post","link":"https:\/\/www.winhelponline.com\/blog\/services-svchost-windows\/","title":{"rendered":"Multiple Svchost.exe in Task Manager; View Services Running Under Each Svchost.exe"},"content":{"rendered":"<p>Svchost.exe is a process that hosts Windows services to perform various functions. There can be multiple instances of svchost.exe (host process for Windows services) running on your computer, with each instance containing different services. Especially on Windows 10 v1709 and Windows 11, you might see <a href=\"https:\/\/www.winhelponline.com\/blog\/view-resources-usage-each-service-svchost-windows-10\/\">50+ Svchost.exe<\/a> processes.<\/p>\n<p>Using Task Manager, you can view the list of Services running under a particular svchost.exe process. <!--more--><\/p>\n<h2>List Services Running Under Each Svchost.exe<\/h2>\n<h3>Using Task Manager<\/h3>\n<ol>\n<li>Open Task Manager by right-clicking the taskbar and then clicking <b>Task Manager<\/b>.<\/li>\n<li>Select the &#8220;Processes&#8221; tab, and click &#8220;Show processes from all users.&#8221;<\/li>\n<li>Right-click on a <code>svchost.exe<\/code> process and click &#8220;Go to service(s).&#8221;<br \/>\n<b><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-10019\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2009\/05\/svchost-list-services-1.png\" alt=\"view services running under svchost.exe\" width=\"643\" height=\"422\" \/><br \/>\n<\/b>This highlights services that are hosted by the <code>svchost.exe<\/code> process which you right-clicked on.<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-10018\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2009\/05\/svchost-list-services-2.png\" alt=\"view services running under svchost.exe\" width=\"666\" height=\"279\" \/><\/li>\n<\/ol>\n<hr \/>\n<h3>Using Command-line<\/h3>\n<p>Alternately, you can find the list of Services hosted by each svchost.exe process by running the <code>tasklist \/svc<\/code> command from a Command Prompt window.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-10017\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2009\/05\/svchost-list-services-3.png\" alt=\"view services running under svchost.exe\" width=\"699\" height=\"480\" \/><\/p>\n<p>Or, even better.. to get the svchost.exe entries only, run the following command:<\/p>\n<pre>tasklist \/svc \/fi \"imagename eq svchost.exe\"<\/pre>\n<p>The output shows the service name (instead of the display name) adjacent to each svchost.exe process, such as below:<\/p>\n<pre>svchost.exe 2452 Dnscache\r\nsvchost.exe 2460 DoSvc\r\nsvchost.exe 2544 Wcmsvc\r\nsvchost.exe 2552 DusmSvc\r\nsvchost.exe 2676 BFE, mpssvc<\/pre>\n<p>To know the display name of a service &#8212; e.g., <code>mpssvc<\/code>, you can run the following command:<\/p>\n<pre>sc getdisplayname mpssvc<\/pre>\n<p>The output looks like this:<\/p>\n<pre>[SC] GetServiceDisplayName SUCCESS\r\nName = Windows Defender Firewall<\/pre>\n<p><em>(Or, you can look up the service display names here \u2192 <a href=\"https:\/\/www.winhelponline.com\/blog\/windows-10-default-services-configuration\/\">Windows 10 Services listing<\/a> &amp; <a href=\"https:\/\/www.winhelponline.com\/blog\/windows-11-default-services-configuration\/\">Windows 11 Services listing<\/a>.)<\/em><\/p>\n<hr \/>\n<h3>Using Resource Monitor<\/h3>\n<ol>\n<li>Or, run the <a href=\"https:\/\/www.winhelponline.com\/blog\/resource-monitor-find-process-locked-file-windows-7\/\">Resource Monitor<\/a> (<code>resmon.exe<\/code> or <code>perfmon.exe \/res<\/code>)<\/li>\n<li>Click on the CPU tab and select a svchost.exe process from the list.<\/li>\n<li>Under the Services section, you&#8217;ll see the list of services running under that particular instance of svchost.exe.<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-10020\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2009\/05\/svchost-list-services-4.png\" alt=\"view services running under svchost.exe\" width=\"700\" height=\"425\" \/><\/li>\n<\/ol>\n<div class=\"rp\"><strong>RELATED:<\/strong> <a href=\"https:\/\/www.winhelponline.com\/blog\/view-resources-usage-each-service-svchost-windows-10\/\">View Resources Usage by Individual Services in Windows 10<\/a><\/div>\n<hr \/>\n<h3>Process Explorer<\/h3>\n<p>You can easily view the list of services under each svchost.exe process using Windows Sysinternals <a href=\"https:\/\/docs.microsoft.com\/en-us\/sysinternals\/downloads\/process-explorer\" target=\"_blank\" rel=\"noopener\">Process Explorer<\/a>.<\/p>\n<ol>\n<li>In Process Explorer, sort the Process column ascending or descending.<\/li>\n<li>Scroll down and select a svchost.exe process.<\/li>\n<li>Right-click on the process and click Properties.<\/li>\n<li>Click on the Services tab.<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-24197\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2009\/05\/procmon-svchost-services-list.png\" alt=\"process explorer - svchost.exe - list of services\" width=\"735\" height=\"432\" \/><\/li>\n<\/ol>\n<p>You&#8217;ll see the list of services grouped under that particular instance of svchost.exe<\/p>\n<p>How the services are grouped is determined by the settings in the following registry key:<\/p>\n<pre>HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\SVCHOST<\/pre>\n<p>When a svchost.exe process is launched with a specific parameter, it looks for a value (list of service names) of the same name under the above registry key. These services are loaded under that instance of svchost.exe.<\/p>\n<h4>Changes in Windows 10<\/h4>\n<p>Unlike earlier Windows Operating Systems, in Windows 10 and 11, each service would get its <a href=\"https:\/\/www.winhelponline.com\/blog\/view-resources-usage-each-service-svchost-windows-10\/\">own service host<\/a> (svchost.exe) instead of the services being grouped or hosted under a single svchost.exe. This change was first introduced in Windows 10 v1709 on systems with more than 3.5 GB of RAM.<\/p>\n<p>However, even on systems with more than 3.5 GB of RAM, you may still see some svchost.exe process hosting four or more services in Windows 10. In earlier versions of Windows, you could easily see 10 or more services running under a single svchost.exe process (grouped), but that&#8217;s not always the case on Windows 10 and 11 systems.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Svchost.exe is a process that hosts Windows services to perform various functions. There can be multiple instances of svchost.exe (host process for Windows services) running on your computer, with each instance containing different services. Especially on Windows 10 v1709 and Windows 11, you might see 50+ Svchost.exe processes. Using Task Manager, you can view the &#8230; <a title=\"Multiple Svchost.exe in Task Manager; View Services Running Under Each Svchost.exe\" class=\"read-more\" href=\"https:\/\/www.winhelponline.com\/blog\/services-svchost-windows\/\" aria-label=\"Read more about Multiple Svchost.exe in Task Manager; View Services Running Under Each Svchost.exe\">Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[7],"tags":[],"class_list":["post-895","post","type-post","status-publish","format-standard","hentry","category-windows"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":4527,"url":"https:\/\/www.winhelponline.com\/blog\/view-resources-usage-each-service-svchost-windows-10\/","url_meta":{"origin":895,"position":0},"title":"View Resources Usage by Individual Services in Windows 10","author":"Ramesh","date":"November 5, 2016","format":false,"excerpt":"With the Windows 10 Creators Update (codenamed \"Redstone 2\") Preview Build 14942, the way in which services are hosted has changed. In Windows 10 v1703 systems with more than 3.5 GB of RAM, each service would get its own service host (svchost.exe), instead of running under a shared service process.\u2026","rel":"","context":"In &quot;Windows 10&quot;","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"svchost separate windows 10","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/11\/services_1.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/11\/services_1.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/11\/services_1.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":3128,"url":"https:\/\/www.winhelponline.com\/blog\/program-using-internet-resource-monitor\/","url_meta":{"origin":895,"position":1},"title":"Which Program is Using all of Your Internet Bandwidth? Use Resource Monitor to Find it.","author":"Ramesh","date":"May 22, 2016","format":false,"excerpt":"If you're on a slow or capped connection, keeping an eye on the downloads which might be happening at the background is essential. This post explains how to find which programs are currently accessing the internet or transferring data to and from a remote server, and at what speed. The\u2026","rel":"","context":"In &quot;Windows&quot;","block_context":{"text":"Windows","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/05\/taskmgr-net-usage-2.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/05\/taskmgr-net-usage-2.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/05\/taskmgr-net-usage-2.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":8349,"url":"https:\/\/www.winhelponline.com\/blog\/error-1083-executable-service-configured-not-implement-service\/","url_meta":{"origin":895,"position":2},"title":"Error 1083 &#8220;The executable program that this service is configured to run in does not implement the service&#8221;","author":"Ramesh","date":"March 29, 2019","format":false,"excerpt":"When you attempt to start some Windows services using the Services MMC or command-line, error 1083 or 1053 is shown, and the service fails to start. Here is the error message verbatim: Windows could not start the [service name] service on Local Computer.Error 1083: The executable program that this service\u2026","rel":"","context":"In &quot;Windows&quot;","block_context":{"text":"Windows","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/"},"img":{"alt_text":"fix for services error 1083 and 1053","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2019\/03\/service-error-1083-fix-1.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":19520,"url":"https:\/\/www.winhelponline.com\/blog\/view-edit-service-permissions-windows\/","url_meta":{"origin":895,"position":3},"title":"How to View and Modify Service Permissions in Windows","author":"Ramesh","date":"October 25, 2020","format":false,"excerpt":"Summary: This article explains the various methods to view the permissions for any Service in Windows. It also covers the tools and methods to modify the service permissions easily. Just as file system objects and registry keys have permissions, each service in Windows can have a set of permissions. The\u2026","rel":"","context":"In &quot;Utilities&quot;","block_context":{"text":"Utilities","link":"https:\/\/www.winhelponline.com\/blog\/category\/utilities\/"},"img":{"alt_text":"psservice64 view service permissions","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/10\/psservice-view-service-permissions.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/10\/psservice-view-service-permissions.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2020\/10\/psservice-view-service-permissions.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":4716,"url":"https:\/\/www.winhelponline.com\/blog\/webcam-which-program-using-device\/","url_meta":{"origin":895,"position":4},"title":"Find Which Program is Using Your Webcam Currently","author":"Ramesh","date":"December 2, 2016","format":false,"excerpt":"Does your webcam indicator LED get turned on automatically without you doing anything? Are you're worried if you're being spied upon by some malware? Or, are you seeing the error \"Your webcam is currently being used by another application\" when using Skype or other messaging application? The built-in Camera app\u2026","rel":"","context":"In &quot;Utilities&quot;","block_context":{"text":"Utilities","link":"https:\/\/www.winhelponline.com\/blog\/category\/utilities\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/12\/camera-reserved-by-another-app.jpg?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/12\/camera-reserved-by-another-app.jpg?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/12\/camera-reserved-by-another-app.jpg?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":42,"url":"https:\/\/www.winhelponline.com\/blog\/configure-task-manager-to-display-full-path-of-running-processes\/","url_meta":{"origin":895,"position":5},"title":"Task Manager: Show Command-line and Image Path of Running Processes","author":"Ramesh","date":"March 3, 2008","format":false,"excerpt":"Out of all the built-in troubleshooting tools in Windows, Task Manager is probably the most useful tool. Almost every end-user knows what to do when an application stalls. They just fire up Task Manager using Ctrl + Shift + Esc and end the nonresponsive task. Also, Task Manager can be\u2026","rel":"","context":"In &quot;Windows&quot;","block_context":{"text":"Windows","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/"},"img":{"alt_text":"task manager show command line","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2008\/03\/taskmgr_command_line_4.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]}],"_links":{"self":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts\/895","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/comments?post=895"}],"version-history":[{"count":0,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts\/895\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/media?parent=895"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/categories?post=895"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/tags?post=895"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}