LKBEN10727: Which services belong together?


Symptom

In tasklist there are several services grouped together to a single svchost.exe, some run alone.

Cause

Services are grouped depending their configuration in windows registry

Solution

Example:
svchost.exe                 924 DcomLaunch, TermService
svchost.exe                 992 RpcSs
svchost.exe                1100 AudioSrv, Browser, CryptSvc, Dhcp, dmserver,
                                ERSvc, EventSystem, helpsvc, lanmanserver,
                                lanmanworkstation, Netman, Nla, RasMan,
                                Schedule, seclogon, SENS, SharedAccess,
                                ShellHWDetection, srservice, Themes, TrkWks,
                                W32Time, winmgmt, wuauserv, WZCSVC
svchost.exe                1156 Dnscache
svchost.exe                1316 LmHosts, RemoteRegistry, SSDPSRV, WebClient
svchost.exe                3828 TapiSrv

This grouping is been done in registry under:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost

Each svchost.exe seen in your tasklist belongs to one of the following REG_MULTI_SZ entries:
DcomLaunch
HTTPFilter
imgsvc
LocalService
netsvcs
NetworkService
rpcss
tapisrv
termsvcs

 

Disclaimer:

The information provided in this document is intended for your information only. Lubby makes no claims to the validity of this information. Use of this information is at own risk!

About the Author

Author: Wim Peeters - Keskon GmbH & Co. KG

Wim Peeters is electronics engineer with an additional master in IT and over 30 years of experience, including time spent in support, development, consulting, training and database administration. Wim has worked with SQL Server since version 6.5. He has developed in C/C++, Java and C# on Windows and Linux. He writes knowledge base articles to solve IT problems and publishes them on the Lubby Knowledge Platform.