Windows DatabaseebooksStatistical Information

LWE10169 : Which services belong together?

Symptom:

In tasklist there are several services grouped together to a single svchost.exe, some run alone.

Cause:

Services are grouped depending their configuration in windows registry

Solution:

Example:
svchost.exe                 924 DcomLaunch, TermService
svchost.exe                 992 RpcSs
svchost.exe                1100 AudioSrv, Browser, CryptSvc, Dhcp, dmserver,
                                ERSvc, EventSystem, helpsvc, lanmanserver,
                                lanmanworkstation, Netman, Nla, RasMan,
                                Schedule, seclogon, SENS, SharedAccess,
                                ShellHWDetection, srservice, Themes, TrkWks,
                                W32Time, winmgmt, wuauserv, WZCSVC
svchost.exe                1156 Dnscache
svchost.exe                1316 LmHosts, RemoteRegistry, SSDPSRV, WebClient
svchost.exe                3828 TapiSrv

This grouping is been done in registry under:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost

Each svchost.exe seen in your tasklist belongs to one of the following REG_MULTI_SZ entries:
DcomLaunch
HTTPFilter
imgsvc
LocalService
netsvcs
NetworkService
rpcss
tapisrv
termsvcs

 


Disclaimer:

The information provided in this document is intended for your information only. Lubby makes no claims to the validity of this information. Use of this information is at own risk!
Copyright © 2004-2011 Lubby (V3.0.10 Aug 2011)
Sponsored by Keskon.
Statistical information by Google Analytics