See What Services Are Associated with a Process

Posted November 7, 2005 by MickeyMouse in Windows

Your Task Manager shows that a process is raging out of control. What is causing a process such as svchost.exe to use up so much CPU time? Here is how to find out.


Every process can have numerous services tied to it. When you hit Ctrl-Alt-Del and see the list of processes, you really have no idea what services are running behind that process. This will show you.

1. If you have XP Home, you will need to install Tasklist. Put it in your \windows\system32 folder. You can get the directions for installing it here:
XP: Tasklist.exe – Get a List of Processes From the Command Line

2. Click Start.
3. Click Run.
4. Type cmd.exe , and hit Enter.
5. In the command window, type the following:
tasklist /svc /fi "imagename eq svchost.exe"

You can replace svchost.exe with whatever process you wish to explore.

You will get output of all the services associated with svchost:

Image Name PID Services
========================= ====== =============================================
svchost.exe 1400 DcomLaunch, TermService
svchost.exe 1452 RpcSs
svchost.exe 1648 6to4, AudioSrv, Browser, CryptSvc, Dhcp,
dmserver, ERSvc, EventSystem,
FastUserSwitchingCompatibility, helpsvc,
HidServ, lanmanserver, lanmanworkstation,
Netman, Nla, RasMan, Schedule, seclogon,
SENS, SharedAccess, ShellHWDetection,
srservice, TapiSrv, Themes, TrkWks, W32Time,
winmgmt, wscsvc, wuauserv, WZCSVC
svchost.exe 1748 Dnscache
svchost.exe 1912 LmHosts, SSDPSRV, WebClient
svchost.exe 480 BthServ
svchost.exe 628 stisvc
svchost.exe 2212 HTTPFilter

You might want to check out this Tasklist tech-recipe as well:
XP Pro: List active Windows programs from command line with tasklist

The Conversation

Follow the reactions below and share your own thoughts.