Knowledge

svchost.exe

Source 📝

2399: 2410: 50:, where a number of services can share a process in order to reduce resource consumption. Grouping multiple services into a single process conserves computing resources, and this consideration was of particular concern to NT designers because creating Windows processes takes more time and consumes more memory than in other operating systems, e.g. in the 153:
Starting with Windows 10 version 1903, Microsoft changed the way services are grouped into host processes. On client computer systems with more than 3.5 GB of memory, services are no longer grouped into shared host processes. Instead, each service is run in its own process. This results in better
137:
key, which it interprets as a list of service names. Then it notifies the SCM of all the services that it hosts. SCM does not launch a second SvcHost process for any of those received services; instead, it simply sends a "start" command to the respective SvcHost process containing the name of the
218:
includes a list of services, showing their groups and Process IDs (PIDs); right-clicking on an svchost instance in the Task Manager's "Processes" tab and selecting "Go to Service(s)" switches to that list of services and selects the service running under the corresponding svchost instance.
256:
In order to troubleshoot other kinds of problems with a service running inside an svchost instance, the service(s) suspected to be causing the problem must (all) be reconfigured so that each runs inside its own svchost instance. For example,
54:
family. However, if one of the services causes an unhandled exception, the entire process may crash. In addition, identifying component services can be more difficult for end users. Problems with various hosted services, particularly with
512:
Whether this is useful is doubtful, it typically shows only the name of the service for the running web browser (e.g. it lists various items of information related to the internet connection and ports in use, but logs them all as simply
283:, starting with release 1703, svchost was redesigned by Microsoft to host only one service per process, depending on available system memory. The default setting causes services to be hosted independently if the system has at least 248:
only accounts for (most of) those resources at process level. It does however show processor usage at service level, on the "CPU" tab. A service-aware list of TCP connections and UDP ports opened can be obtained using the command
162:
Starting with Windows Vista, the internal identification of services inside shared processes (svchost included) is achieved by so-called service tags. The service tag for each thread is stored in the SubProcessTag of its
202:
shows a list of the services being run by each listed process (i.e. by each running instance of svchost.exe), with each separate instance of the svchost process identified by a unique Process ID number (PID).
243:
None of the above methods allows the user to identify which of the multiple services running inside an svchost instance accesses a particular resource, i.e. processor, disk, network or memory; the Windows
698: 269:
is done by an analogous command. The service must be restarted for such a configuration change to take effect. This debugging process is not foolproof however; in some cases, a
154:
isolation of services, making the computer system more resilient to service failures and vulnerabilities and easier to debug. However, it adds some memory overhead.
678: 423: 523: 377: 226:, the Task Manager interface was streamlined so that each svchost entry can be expanded by a single click to a sub-list of services running inside it. 888: 444: 350: 167:(TEB). The tag is propagated across all threads that a main service thread subsequently starts, except for threads created indirectly by Windows 544: 1414: 1564: 492: 133:'s database. The first time that a SvcHost process is launched with a specific parameter, it looks for a value of the same name under the 1429: 1594: 671: 1251: 565: 456: 2285: 664: 631: 606: 1944: 2414: 687: 311: 1664: 1304: 723: 1836: 1745: 1261: 893: 175: 1584: 1527: 1489: 1474: 402: 2330: 1912: 1439: 164: 96:(for 32-bit services running on 64-bit systems) runs in multiple instances, each hosting one or more services. 1454: 186:
connections associated with each service. Some third party tools like ScTagQuery also make use of this API.
2295: 2164: 1851: 1841: 1715: 1619: 1479: 836: 791: 236:(available as a free download from Microsoft) provides additional information about services running under 2435: 2403: 1771: 1730: 1629: 1484: 1281: 996: 946: 493:"Figuring out why my SVCHOST.EXE is at 100% CPU without complicated tools in Windows 7 - Scott Hanselman" 1993: 1873: 1579: 1078: 718: 711: 706: 354: 316: 183: 129:). Services sharing the same SvcHost process specify the same parameter, having a single entry in the 2325: 2290: 1720: 1710: 1649: 1559: 1449: 1419: 1068: 766: 1690: 1634: 1614: 1459: 1228: 1113: 1003: 2275: 2270: 2114: 2109: 2069: 2029: 1979: 1725: 1469: 1464: 1339: 1314: 1276: 1246: 1196: 1008: 931: 856: 776: 751: 306: 130: 2440: 2255: 2219: 1831: 1816: 1574: 1532: 1424: 1354: 1271: 1256: 851: 2384: 2204: 2149: 2089: 2074: 1883: 1554: 1509: 1366: 1319: 651: 138:
service that should be launched within its context, and whose respective DLL SvcHost loads.
2369: 2364: 2209: 2179: 2144: 2034: 1740: 1735: 1639: 1589: 1547: 1517: 1404: 991: 956: 903: 841: 215: 100: 261:
will reconfigure the service named "foo" to run in its own svchost instance. Changing the
8: 2310: 2169: 2124: 2099: 2054: 2000: 1799: 1654: 1537: 986: 971: 911: 831: 801: 168: 31: 240:
processes, when the user hovers the mouse over an svchost instance in Process Explorer.
145:
of a shared service is approximately 150 KB instead of 800 KB for a standalone process.
2315: 2265: 2039: 1958: 1863: 1569: 1409: 1376: 1349: 1344: 1191: 1018: 921: 916: 816: 273:
may occur, which causes the problem to go away when the service is running separately.
2379: 2305: 2260: 2159: 2154: 2129: 2084: 2049: 1919: 1223: 1033: 866: 627: 602: 2320: 2229: 2064: 2007: 1965: 1826: 1794: 1750: 1705: 1624: 1384: 1181: 1058: 1048: 811: 806: 615: 590: 245: 233: 43: 2356: 2239: 2214: 2199: 2189: 2139: 2134: 1888: 1522: 1238: 1103: 1093: 1038: 1023: 881: 771: 623: 598: 276:
A more complex method of troubleshooting is to create an isolated service group.
66:, although the underlying support for shared service processes has existed since 35: 1846: 1389: 1201: 1176: 1108: 976: 951: 926: 876: 846: 756: 656: 646: 67: 56: 378:"Microsoft promises to fix Windows XP SVCHOST redlining 'as soon as possible'" 2429: 2335: 2194: 2094: 1434: 1394: 1171: 1146: 1138: 1073: 941: 741: 207: 2104: 2059: 1986: 1951: 1659: 1609: 1399: 1151: 1098: 1063: 981: 961: 781: 761: 230: 63: 59:, get reported by users (and headlined by the press) as involving svchost. 2174: 2119: 2024: 1878: 1766: 1644: 1499: 1291: 1266: 861: 142: 174:
The set of service tag management routines is currently an undocumented
2079: 1903: 1444: 1334: 1208: 1128: 1053: 871: 280: 195: 39: 1700: 1695: 1329: 1218: 1166: 936: 403:"Svchost.exe gets worse before it's fixed - Series - Windows Secrets" 270: 223: 211: 2280: 2184: 2044: 1804: 1669: 1299: 1156: 1043: 1028: 966: 826: 786: 189: 424:"How to troubleshoot Service Host (svchost.exe) related problems?" 2300: 2234: 1972: 1858: 1821: 1809: 1494: 1213: 1186: 1161: 1123: 1118: 821: 746: 524:"What is svchost.exe, and why do I have so many instances of it?" 301: 179: 148: 1088: 2374: 2224: 1893: 1674: 1599: 1013: 2340: 1776: 1604: 1309: 1083: 796: 296: 111:
subkey, pointing to the respective service's DLL file. Their
103:(DLLs). Each service's registry key must have a value named 1868: 1542: 1361: 1324: 51: 1786: 614: 589: 479: 334: 135:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost
141:
According to a 2003 Microsoft presentation, the minimum
178:, although it is used by some Windows utilities like 545:"Getting Started with SVCHOST.EXE Troubleshooting" 2427: 686: 566:"Changes to Service Host grouping in Windows 10" 457:"Changes to Service Host grouping in Windows 10" 190:Identification and management of hosted services 46:. Svchost is essential in the implementation of 99:Services running in SvcHost are implemented as 375: 149:Changes to Service Host grouping in Windows 10 672: 2409: 679: 665: 475: 473: 345: 343: 618:; Solomon, David; Ionescu, Alex (2012), 593:; Solomon, David; Ionescu, Alex (2009), 480:Russinovich, Solomon & Ionescu (2012 335:Russinovich, Solomon & Ionescu (2009 470: 340: 2428: 62:The svchost process was introduced in 2286:Next-Generation Secure Computing Base 660: 312:List of Microsoft Windows components 1415:Distributed Transaction Coordinator 376:Woody Leonhard (16 December 2013). 13: 1746:User Interface Privilege Isolation 583: 14: 2452: 640: 73: 2408: 2398: 2397: 198:and later editions, the command 1475:Remote Differential Compression 558: 537: 516: 506: 157: 2331:Windows System Assessment Tool 485: 449: 437: 416: 395: 369: 328: 1: 322: 1620:Open XML Paper Specification 1480:Remote Installation Services 688:Microsoft Windows components 101:dynamically-linked libraries 7: 1772:Windows Subsystem for Linux 1731:Mandatory Integrity Control 1485:Windows Deployment Services 1282:Wireless Zero Configuration 445:"Windows Service Processes" 290: 10: 2457: 1874:Universal Windows Platform 1580:Kernel Transaction Manager 1565:Hardware Abstraction Layer 1262:Multimedia Class Scheduler 317:Windows NT startup process 115:definition is of the form 34:that can host one or more 2393: 2353: 2326:Windows Services for UNIX 2248: 2017: 1936: 1929: 1902: 1785: 1759: 1711:Data Execution Prevention 1683: 1560:Graphics Device Interface 1508: 1450:Network Access Protection 1375: 1290: 1237: 1137: 1069:Remote Desktop Connection 902: 732: 694: 620:Windows Internals. Part 1 258: 250: 199: 120:\System32\svchost.exe -k 116: 1691:Security and Maintenance 1635:Security Account Manager 1229:Windows XP visual styles 214:, the "Services" tab in 165:thread environment block 48:shared service processes 2276:Media Control Interface 2110:Help and Support Center 1726:Kernel Patch Protection 1490:System Resource Manager 1470:Remote Desktop Services 1465:Print Services for UNIX 1247:Service Control Manager 857:Windows Error Reporting 777:DirectX Diagnostic Tool 459:. Microsoft. 2021-08-27 307:Service Control Manager 259:sc config foo type= own 2256:Desktop Cleanup Wizard 1832:COM Structured storage 1533:Desktop Window Manager 1425:Windows Media Services 78:Its executable image, 16:Windows system process 1884:Windows Mixed Reality 1555:Enhanced Write Filter 1405:Roaming user profiles 647:svchost.exe uitgelegd 93:\SysWOW64\Svchost.exe 84:\System32\Svchost.exe 2165:Mobile Device Center 2115:Health & Fitness 1913:Solitaire Collection 1741:User Account Control 1736:Protected Media Path 1640:Server Message Block 1590:Logical Disk Manager 842:System Policy Editor 827:System Configuration 216:Windows Task Manager 2311:Virtual DOS machine 1655:System Idle Process 1630:Resource Protection 1538:Portable Executable 1430:Active DRM Services 832:System File Checker 802:Performance Monitor 2436:Windows components 2316:Windows on Windows 2040:Backup and Restore 1852:Transaction Server 1570:I/O request packet 1410:Folder redirection 1079:Speech Recognition 837:System Information 792:Management Console 595:Windows® Internals 443:David B. Probert, 2423: 2422: 2349: 2348: 2306:Video for Windows 2261:Games for Windows 2130:Internet Explorer 1224:Windows Spotlight 867:Windows Installer 633:978-0-7356-4873-9 616:Russinovich, Mark 608:978-0-7356-2530-3 591:Russinovich, Mark 357:on 6 October 2014 351:"Shared Services" 44:operating systems 2448: 2412: 2411: 2401: 2400: 2321:Windows SideShow 2100:Food & Drink 1994:Spider Solitaire 1934: 1933: 1827:ActiveX Document 1795:Active Scripting 1751:Windows Firewall 1706:Credential Guard 1385:Active Directory 1182:Indexing Service 812:Resource Monitor 807:Recovery Console 681: 674: 667: 658: 657: 636: 622:(6th ed.), 611: 597:(5th ed.), 578: 577: 575: 573: 562: 556: 555: 553: 551: 541: 535: 534: 532: 530: 520: 514: 510: 504: 503: 501: 499: 489: 483: 477: 468: 467: 465: 464: 453: 447: 441: 435: 434: 432: 430: 420: 414: 413: 411: 409: 399: 393: 392: 390: 388: 373: 367: 366: 364: 362: 353:. Archived from 347: 338: 332: 286: 268: 264: 260: 252: 246:Resource Monitor 239: 234:Process Explorer 201: 136: 128: 124: 123: 119: 114: 110: 106: 95: 86: 36:Windows services 2456: 2455: 2451: 2450: 2449: 2447: 2446: 2445: 2426: 2425: 2424: 2419: 2389: 2357:Microsoft Store 2355: 2345: 2291:POSIX subsystem 2271:File Protection 2244: 2215:Program Manager 2200:Phone Companion 2190:Outlook Express 2140:Make Compatible 2070:Desktop Gadgets 2030:Anytime Upgrade 2013: 1925: 1898: 1889:Windows Runtime 1781: 1755: 1721:Family features 1679: 1504: 1460:DFS Replication 1371: 1286: 1277:Error Reporting 1233: 1133: 1009:Mobility Center 1004:Movies & TV 898: 882:Windows Insider 772:Driver Verifier 767:Drive Optimizer 734: 728: 719:Booting process 690: 685: 643: 634: 624:Microsoft Press 609: 599:Microsoft Press 586: 584:Further reading 581: 571: 569: 564: 563: 559: 549: 547: 543: 542: 538: 528: 526: 522: 521: 517: 511: 507: 497: 495: 491: 490: 486: 478: 471: 462: 460: 455: 454: 450: 442: 438: 428: 426: 422: 421: 417: 407: 405: 401: 400: 396: 386: 384: 374: 370: 360: 358: 349: 348: 341: 333: 329: 325: 293: 284: 266: 262: 237: 192: 182:to display the 160: 151: 134: 126: 122:%service group% 121: 117: 112: 108: 104: 88: 79: 76: 17: 12: 11: 5: 2454: 2444: 2443: 2438: 2421: 2420: 2418: 2417: 2406: 2394: 2391: 2390: 2388: 2387: 2382: 2377: 2372: 2367: 2361: 2359: 2351: 2350: 2347: 2346: 2344: 2343: 2338: 2333: 2328: 2323: 2318: 2313: 2308: 2303: 2298: 2293: 2288: 2283: 2278: 2273: 2268: 2263: 2258: 2252: 2250: 2246: 2245: 2243: 2242: 2237: 2232: 2227: 2222: 2220:Steps Recorder 2217: 2212: 2207: 2202: 2197: 2192: 2187: 2182: 2177: 2172: 2167: 2162: 2157: 2152: 2147: 2142: 2137: 2132: 2127: 2122: 2117: 2112: 2107: 2102: 2097: 2092: 2087: 2082: 2077: 2072: 2067: 2062: 2057: 2052: 2047: 2042: 2037: 2032: 2027: 2021: 2019: 2015: 2014: 2012: 2011: 2004: 1997: 1990: 1983: 1976: 1969: 1962: 1955: 1948: 1940: 1938: 1931: 1927: 1926: 1924: 1923: 1916: 1908: 1906: 1900: 1899: 1897: 1896: 1891: 1886: 1881: 1876: 1871: 1866: 1861: 1856: 1855: 1854: 1849: 1847:OLE Automation 1844: 1839: 1834: 1829: 1824: 1814: 1813: 1812: 1807: 1802: 1791: 1789: 1783: 1782: 1780: 1779: 1774: 1769: 1763: 1761: 1757: 1756: 1754: 1753: 1748: 1743: 1738: 1733: 1728: 1723: 1718: 1713: 1708: 1703: 1698: 1693: 1687: 1685: 1681: 1680: 1678: 1677: 1672: 1667: 1662: 1657: 1652: 1647: 1642: 1637: 1632: 1627: 1622: 1617: 1615:Object Manager 1612: 1607: 1602: 1597: 1592: 1587: 1582: 1577: 1575:Imaging Format 1572: 1567: 1562: 1557: 1552: 1551: 1550: 1545: 1535: 1530: 1525: 1520: 1514: 1512: 1506: 1505: 1503: 1502: 1497: 1492: 1487: 1482: 1477: 1472: 1467: 1462: 1457: 1452: 1447: 1442: 1437: 1432: 1427: 1422: 1417: 1412: 1407: 1402: 1397: 1392: 1387: 1381: 1379: 1373: 1372: 1370: 1369: 1364: 1359: 1358: 1357: 1352: 1347: 1342: 1337: 1332: 1322: 1317: 1312: 1307: 1302: 1296: 1294: 1288: 1287: 1285: 1284: 1279: 1274: 1272:Task Scheduler 1269: 1264: 1259: 1254: 1249: 1243: 1241: 1235: 1234: 1232: 1231: 1226: 1221: 1216: 1211: 1206: 1205: 1204: 1202:Special folder 1199: 1194: 1189: 1184: 1174: 1169: 1164: 1159: 1154: 1149: 1143: 1141: 1135: 1134: 1132: 1131: 1126: 1121: 1116: 1114:Voice Recorder 1111: 1106: 1101: 1096: 1091: 1086: 1081: 1076: 1071: 1066: 1061: 1056: 1051: 1046: 1041: 1036: 1031: 1026: 1021: 1016: 1011: 1006: 1001: 1000: 999: 989: 984: 979: 974: 969: 964: 959: 954: 949: 944: 939: 934: 929: 924: 919: 914: 908: 906: 900: 899: 897: 896: 891: 886: 885: 884: 877:Windows Update 874: 869: 864: 859: 854: 849: 847:System Restore 844: 839: 834: 829: 824: 819: 814: 809: 804: 799: 794: 789: 784: 779: 774: 769: 764: 759: 757:Device Manager 754: 749: 747:Command Prompt 744: 738: 736: 730: 729: 727: 726: 721: 716: 715: 714: 709: 701: 695: 692: 691: 684: 683: 676: 669: 661: 655: 654: 649: 642: 641:External links 639: 638: 637: 632: 612: 607: 585: 582: 580: 579: 557: 536: 515: 513:"firefox.exe") 505: 484: 469: 448: 436: 415: 394: 368: 339: 326: 324: 321: 320: 319: 314: 309: 304: 299: 292: 289: 191: 188: 159: 156: 150: 147: 75: 74:Implementation 72: 68:Windows NT 3.1 57:Windows Update 30:) is a system 15: 9: 6: 4: 3: 2: 2453: 2442: 2441:Windows files 2439: 2437: 2434: 2433: 2431: 2416: 2407: 2405: 2396: 2395: 2392: 2386: 2383: 2381: 2378: 2376: 2373: 2371: 2368: 2366: 2363: 2362: 2360: 2358: 2352: 2342: 2339: 2337: 2336:Windows To Go 2334: 2332: 2329: 2327: 2324: 2322: 2319: 2317: 2314: 2312: 2309: 2307: 2304: 2302: 2299: 2297: 2294: 2292: 2289: 2287: 2284: 2282: 2279: 2277: 2274: 2272: 2269: 2267: 2264: 2262: 2259: 2257: 2254: 2253: 2251: 2247: 2241: 2238: 2236: 2233: 2231: 2228: 2226: 2223: 2221: 2218: 2216: 2213: 2211: 2208: 2206: 2205:Photo Gallery 2203: 2201: 2198: 2196: 2193: 2191: 2188: 2186: 2183: 2181: 2178: 2176: 2173: 2171: 2168: 2166: 2163: 2161: 2158: 2156: 2153: 2151: 2150:Meeting Space 2148: 2146: 2143: 2141: 2138: 2136: 2133: 2131: 2128: 2126: 2123: 2121: 2120:HyperTerminal 2118: 2116: 2113: 2111: 2108: 2106: 2103: 2101: 2098: 2096: 2093: 2091: 2090:Easy Transfer 2088: 2086: 2083: 2081: 2078: 2076: 2073: 2071: 2068: 2066: 2063: 2061: 2058: 2056: 2053: 2051: 2048: 2046: 2043: 2041: 2038: 2036: 2033: 2031: 2028: 2026: 2023: 2022: 2020: 2016: 2010: 2009: 2005: 2003: 2002: 1998: 1996: 1995: 1991: 1989: 1988: 1984: 1982: 1981: 1977: 1975: 1974: 1970: 1968: 1967: 1963: 1961: 1960: 1956: 1954: 1953: 1949: 1947: 1946: 1942: 1941: 1939: 1935: 1932: 1928: 1922: 1921: 1917: 1915: 1914: 1910: 1909: 1907: 1905: 1901: 1895: 1892: 1890: 1887: 1885: 1882: 1880: 1877: 1875: 1872: 1870: 1867: 1865: 1862: 1860: 1857: 1853: 1850: 1848: 1845: 1843: 1840: 1838: 1835: 1833: 1830: 1828: 1825: 1823: 1820: 1819: 1818: 1815: 1811: 1808: 1806: 1803: 1801: 1798: 1797: 1796: 1793: 1792: 1790: 1788: 1784: 1778: 1775: 1773: 1770: 1768: 1765: 1764: 1762: 1760:Compatibility 1758: 1752: 1749: 1747: 1744: 1742: 1739: 1737: 1734: 1732: 1729: 1727: 1724: 1722: 1719: 1717: 1714: 1712: 1709: 1707: 1704: 1702: 1699: 1697: 1694: 1692: 1689: 1688: 1686: 1682: 1676: 1673: 1671: 1668: 1666: 1663: 1661: 1658: 1656: 1653: 1651: 1648: 1646: 1643: 1641: 1638: 1636: 1633: 1631: 1628: 1626: 1623: 1621: 1618: 1616: 1613: 1611: 1608: 1606: 1603: 1601: 1598: 1596: 1593: 1591: 1588: 1586: 1585:Library files 1583: 1581: 1578: 1576: 1573: 1571: 1568: 1566: 1563: 1561: 1558: 1556: 1553: 1549: 1546: 1544: 1541: 1540: 1539: 1536: 1534: 1531: 1529: 1526: 1524: 1521: 1519: 1516: 1515: 1513: 1511: 1507: 1501: 1498: 1496: 1493: 1491: 1488: 1486: 1483: 1481: 1478: 1476: 1473: 1471: 1468: 1466: 1463: 1461: 1458: 1456: 1453: 1451: 1448: 1446: 1443: 1441: 1438: 1436: 1433: 1431: 1428: 1426: 1423: 1421: 1418: 1416: 1413: 1411: 1408: 1406: 1403: 1401: 1398: 1396: 1393: 1391: 1388: 1386: 1383: 1382: 1380: 1378: 1374: 1368: 1365: 1363: 1360: 1356: 1353: 1351: 1348: 1346: 1345:Reparse point 1343: 1341: 1338: 1336: 1333: 1331: 1328: 1327: 1326: 1323: 1321: 1318: 1316: 1313: 1311: 1308: 1306: 1303: 1301: 1298: 1297: 1295: 1293: 1289: 1283: 1280: 1278: 1275: 1273: 1270: 1268: 1265: 1263: 1260: 1258: 1255: 1253: 1250: 1248: 1245: 1244: 1242: 1240: 1236: 1230: 1227: 1225: 1222: 1220: 1217: 1215: 1212: 1210: 1207: 1203: 1200: 1198: 1195: 1193: 1190: 1188: 1185: 1183: 1180: 1179: 1178: 1175: 1173: 1170: 1168: 1165: 1163: 1160: 1158: 1155: 1153: 1150: 1148: 1147:Action Center 1145: 1144: 1142: 1140: 1136: 1130: 1127: 1125: 1122: 1120: 1117: 1115: 1112: 1110: 1107: 1105: 1102: 1100: 1097: 1095: 1092: 1090: 1087: 1085: 1082: 1080: 1077: 1075: 1074:Snipping Tool 1072: 1070: 1067: 1065: 1062: 1060: 1057: 1055: 1052: 1050: 1047: 1045: 1042: 1040: 1037: 1035: 1032: 1030: 1027: 1025: 1022: 1020: 1017: 1015: 1012: 1010: 1007: 1005: 1002: 998: 995: 994: 993: 990: 988: 985: 983: 980: 978: 975: 973: 970: 968: 965: 963: 960: 958: 955: 953: 950: 948: 945: 943: 940: 938: 935: 933: 932:Character Map 930: 928: 925: 923: 920: 918: 915: 913: 910: 909: 907: 905: 901: 895: 892: 890: 887: 883: 880: 879: 878: 875: 873: 870: 868: 865: 863: 860: 858: 855: 853: 850: 848: 845: 843: 840: 838: 835: 833: 830: 828: 825: 823: 820: 818: 815: 813: 810: 808: 805: 803: 800: 798: 795: 793: 790: 788: 785: 783: 780: 778: 775: 773: 770: 768: 765: 763: 760: 758: 755: 753: 752:Control Panel 750: 748: 745: 743: 742:App Installer 740: 739: 737: 731: 725: 722: 720: 717: 713: 710: 708: 705: 704: 703:Architecture 702: 700: 697: 696: 693: 689: 682: 677: 675: 670: 668: 663: 662: 659: 653: 650: 648: 645: 644: 635: 629: 625: 621: 617: 613: 610: 604: 600: 596: 592: 588: 587: 567: 561: 546: 540: 525: 519: 509: 494: 488: 481: 476: 474: 458: 452: 446: 440: 425: 419: 404: 398: 383: 379: 372: 356: 352: 346: 344: 336: 331: 327: 318: 315: 313: 310: 308: 305: 303: 300: 298: 295: 294: 288: 282: 277: 274: 272: 254: 247: 241: 235: 232: 227: 225: 220: 217: 213: 209: 208:Windows Vista 204: 200:tasklist /svc 197: 187: 185: 181: 177: 172: 170: 166: 155: 146: 144: 139: 132: 102: 97: 94: 92: 85: 83: 71: 69: 65: 60: 58: 53: 49: 45: 41: 37: 33: 29: 25: 21: 2370:File Manager 2210:Photo Viewer 2145:Media Center 2105:Groove Music 2035:Address Book 2006: 1999: 1992: 1987:Purble Place 1985: 1978: 1971: 1964: 1957: 1952:Chess Titans 1950: 1943: 1930:Discontinued 1918: 1911: 1610:Ntoskrnl.exe 1518:Boot Manager 1510:Architecture 1400:Group Policy 1292:File systems 1192:Saved search 1099:Sticky Notes 1064:Quick Assist 992:Media Player 962:Feedback Hub 957:Fax and Scan 852:Task Manager 782:Event Viewer 762:Disk Cleanup 619: 594: 570:. Retrieved 560: 548:. Retrieved 539: 527:. Retrieved 518: 508: 496:. Retrieved 487: 461:. Retrieved 451: 439: 427:. Retrieved 418: 406:. Retrieved 397: 385:. Retrieved 381: 371: 359:. Retrieved 355:the original 330: 278: 275: 255: 242: 231:Sysinternals 228: 221: 205: 193: 173: 161: 158:Service tags 152: 140: 118:%SystemRoot% 98: 91:%SystemRoot% 90: 89: 82:%SystemRoot% 81: 80: 77: 64:Windows 2000 61: 47: 27: 24:Service Host 23: 19: 18: 2385:Minesweeper 2354:Spun off to 2175:MSN Dial-up 2170:Movie Maker 2075:Diagnostics 2025:ActiveMovie 1767:COMMAND.COM 1645:Shadow Copy 1500:Server Core 1340:Mount Point 1267:Shadow Copy 862:Windows Ink 568:. Microsoft 285:3.5 GB 238:svchost.exe 169:thread-pool 143:working set 20:Svchost.exe 2430:Categories 2365:DVD Player 2180:NetMeeting 2080:DriveSpace 1945:3D Pinball 1445:SharePoint 1209:Start menu 1054:Phone Link 917:Calculator 872:PowerShell 733:Management 652:ScTagQuery 463:2021-01-10 323:References 281:Windows 10 251:netstat -b 196:Windows XP 109:Parameters 107:under the 105:ServiceDll 42:family of 40:Windows NT 2160:Messenger 2155:Messaging 2085:DVD Maker 2055:CD Player 2050:CardSpace 2001:Solitaire 1701:BitLocker 1696:AppLocker 1330:Hard link 1219:Task View 1197:Namespace 1167:ClearType 987:Messaging 972:Magnifier 937:Clipchamp 912:3D Viewer 550:1 October 529:1 October 498:1 October 429:1 October 408:1 October 387:1 October 382:InfoWorld 361:1 October 271:heisenbug 224:Windows 8 212:Windows 7 113:ImagePath 2404:Category 2281:MS-DOS 7 2266:ScanDisk 2185:NTBackup 2065:Contacts 2045:Cardfile 1980:Hold 'Em 1959:FreeCell 1805:VBScript 1716:Defender 1684:Security 1670:Winlogon 1625:Registry 1239:Services 1172:Explorer 1157:AutoPlay 1044:Paint 3D 1029:OneDrive 1019:Narrator 967:Get Help 922:Calendar 817:Settings 787:IExpress 572:30 April 291:See also 287:of RAM. 265:back to 125:; (i.e. 2380:Mahjong 2301:Interix 2235:WinHelp 2135:Journal 2125:Imaging 1973:InkBall 1859:DirectX 1822:ActiveX 1810:JScript 1523:Console 1495:Hyper-V 1390:Domains 1214:Taskbar 1187:IFilter 1162:AutoRun 1124:WordPad 1119:Weather 1034:OneNote 1024:Notepad 947:Cortana 822:Sysprep 302:systemd 180:netstat 127:netsvcs 38:in the 32:process 28:SvcHost 2413:  2402:  2375:Hover! 2249:Others 2230:Travel 2225:Syskey 2008:Tinker 1966:Hearts 1894:WinUSB 1879:WinAPI 1864:Native 1675:WinUSB 1600:MinWin 1377:Server 1177:Search 1089:Sports 1059:Photos 1049:People 927:Camera 630:  605:  267:shared 171:APIs. 2341:WinFS 2240:Write 1937:Games 1904:Games 1777:WoW64 1605:NTLDR 1595:LSASS 1528:CSRSS 1335:links 1310:exFAT 1139:Shell 1104:Store 1094:Start 1084:Skype 1039:Paint 1014:Money 942:Clock 889:WinRE 797:Netsh 735:tools 724:Games 482::335) 337::302) 297:inetd 26:, or 2415:List 2296:HPFS 2060:Chat 2018:Apps 1920:Surf 1869:.NET 1837:DCOM 1665:WHEA 1660:USER 1650:SMSS 1440:WSUS 1420:MSMQ 1362:ReFS 1325:NTFS 1300:CDFS 1257:CLFS 1252:BITS 1152:Aero 1129:Xbox 1109:Tips 997:2022 982:Maps 977:Mail 952:Edge 904:Apps 699:APIs 628:ISBN 603:ISBN 574:2018 552:2014 531:2014 500:2014 431:2014 410:2014 389:2014 363:2014 263:type 229:The 210:and 52:Unix 2195:Pay 2095:Fax 1842:OLE 1817:COM 1800:WSH 1787:API 1548:DLL 1543:EXE 1455:PWS 1435:IIS 1395:DNS 1367:UDF 1355:EFS 1350:TxF 1320:FAT 1315:IFS 1305:DFS 894:WMI 279:In 222:In 206:In 194:In 184:TCP 176:API 131:SCM 87:or 2432:: 712:NT 707:9x 626:, 601:, 472:^ 380:. 342:^ 253:. 70:. 680:e 673:t 666:v 576:. 554:. 533:. 502:. 466:. 433:. 412:. 391:. 365:. 22:(

Index

process
Windows services
Windows NT
operating systems
Unix
Windows Update
Windows 2000
Windows NT 3.1
dynamically-linked libraries
SCM
working set
thread environment block
thread-pool
API
netstat
TCP
Windows XP
Windows Vista
Windows 7
Windows Task Manager
Windows 8
Sysinternals
Process Explorer
Resource Monitor
heisenbug
Windows 10
inetd
systemd
Service Control Manager
List of Microsoft Windows components

Text is available under the Creative Commons Attribution-ShareAlike License. Additional terms may apply.