JSI Tip 2060. What is Svchost.exe and why does Task Manager show more than one of them?.

%SystemRoot%\System32\Svchost.exe is a generic process name for service groupings that run from DLLs.

When you start your Windows 2000 computer, it checks the registry at:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost for each Value Name. How many Value Names you have, depend upon wether you are running W2K Pro or one of the Servers, and what is installed. Multiple groups allow better control and debugging. If you look at:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\<Service Key>\Parameters

you will see that only services with a populated ServiceDll value name have an entry in a Svchost Value Name. This is a type REG_MULTI_SZ data type, so you should use Regedt32 to view it. Click in the MULTI-STRING Editor to deselect the entries, or you may destroy them while looking.

Hide comments

Comments

  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
Publish