mine has 2 service host things and they jump around allot on task manager wtf? and why.

[john jirava]

service host making cpu run harder, jumps around 20 %

 

[MarkW]

Service Host is Windows. Kill it and you effectively kill Windows.

 

[john jirava]

ok so if I kill windows I wont have it? im a newb to computers and really trying to understand as much as possible. also if you know a good book or something that would help thanks for advice and everything

 

[MarkW]

Yes, killing windows and its services is not a pleasant experience.

 

[johnbl]

each instance of service host svchost.exe can provide one or more different services for your machine. (my windows 10 machine has 13 of them running 65 background services.)

to see what is rolled up in your host processes, start cmd.exe as an admin
then run
tasklist.exe /svc /fi "imagename eq svchost.exe"

on my windows 10 system I get this output showing the process id (pid) for the different copies of svchost.exe and what services are running under that host process.

the net effect is that you can not figure out what svchost.exe is doing unless you look at the various services that it is hosting.

you can also use a tool called process explorer from :
https://technet.microsoft.com/en-us/sysinternals/bb896653.aspx


C:\WINDOWS\system32>tasklist /svc /fi "imagename eq svchost.exe"

sorry about the formatting:

Image Name PID Services
========================= ======== ============================================
svchost.exe 868 BrokerInfrastructure, DcomLaunch, LSM,
PlugPlay, Power, SystemEventsBroker
svchost.exe 924 CoreUIRegistrar, RpcEptMapper, RpcSs
svchost.exe 400 AudioEndpointBuilder, DsSvc, hidserv,
NcbService, PcaSvc, SysMain, TrkWks,
UmRdpService, WdiSystemHost, wudfsvc
svchost.exe 532 CryptSvc, Dnscache, LanmanWorkstation,
NlaSvc, TermService
svchost.exe 1228 SSDPSRV, TimeBroker
svchost.exe 1236 Audiosrv, Dhcp, EventLog, Wcmsvc, wscsvc
svchost.exe 1332 Appinfo, AppMgmt, BITS, CertPropSvc, DoSvc,
gpsvc, iphlpsvc, LanmanServer, lfsvc,
ProfSvc, Schedule, SENS, SessionEnv,
ShellHWDetection, Themes, UserManager,
Winmgmt, wuauserv
svchost.exe 1340 EventSystem, FontCache, netprofm, nsi,
WdiServiceHost, WinHttpAutoProxySvc
svchost.exe 1952 BFE, DPS, MpsSvc
svchost.exe 1712 DiagTrack
svchost.exe 3624 OneSyncSvc_Session1,
PimIndexMaintenanceSvc_Session1,
UnistoreSvc_Session1, UserDataSvc_Session1
svchost.exe 4332 tiledatamodelsvc
svchost.exe 4848 ClipSVC

 

[MarkW]

I was going to say that Windows, on a good day, does more than 1 thing at a time... But johnbl covered that quite well.

 

[john jirava]

each instance of service host svchost.exe can provide one or more different services for your machine. (my windows 10 machine has 13 of them running 65 background services.)

to see what is rolled up in your host processes, start cmd.exe as an admin
then run
tasklist.exe /svc /fi "imagename eq svchost.exe"

on my windows 10 system I get this output showing the process id (pid) for the different copies of svchost.exe and what services are running under that host process.

the net effect is that you can not figure out what svchost.exe is doing unless you look at the various services that it is hosting.

you can also use a tool called process explorer from :
https://technet.microsoft.com/en-us/sysinternals/bb896653.aspx


C:\WINDOWS\system32>tasklist /svc /fi "imagename eq svchost.exe"

sorry about the formatting:

Image Name PID Services
========================= ======== ============================================
svchost.exe 868 BrokerInfrastructure, DcomLaunch, LSM,
PlugPlay, Power, SystemEventsBroker
svchost.exe 924 CoreUIRegistrar, RpcEptMapper, RpcSs
svchost.exe 400 AudioEndpointBuilder, DsSvc, hidserv,
NcbService, PcaSvc, SysMain, TrkWks,
UmRdpService, WdiSystemHost, wudfsvc
svchost.exe 532 CryptSvc, Dnscache, LanmanWorkstation,
NlaSvc, TermService
svchost.exe 1228 SSDPSRV, TimeBroker
svchost.exe 1236 Audiosrv, Dhcp, EventLog, Wcmsvc, wscsvc
svchost.exe 1332 Appinfo, AppMgmt, BITS, CertPropSvc, DoSvc,
gpsvc, iphlpsvc, LanmanServer, lfsvc,
ProfSvc, Schedule, SENS, SessionEnv,
ShellHWDetection, Themes, UserManager,
Winmgmt, wuauserv
svchost.exe 1340 EventSystem, FontCache, netprofm, nsi,
WdiServiceHost, WinHttpAutoProxySvc
svchost.exe 1952 BFE, DPS, MpsSvc
svchost.exe 1712 DiagTrack
svchost.exe 3624 OneSyncSvc_Session1,
PimIndexMaintenanceSvc_Session1,
UnistoreSvc_Session1, UserDataSvc_Session1
svchost.exe 4332 tiledatamodelsvc
svchost.exe 4848 ClipSVC

so my solution is to learn and understand what the task bar is saying. and to format it myself? or am I wrong x_x. also im assuming that yall are saying windows is a piece of shit. also is ther a website to learn about what it is saying? I looked at youre webpage thing and not sure I want to download more crap that I can just do if I understand myself. thanks for the help guys.

 

[johnbl]

taskman.exe is built into the system you don't have to download anything.
The tool I mention is owned my Microsoft and just presents a good UI to view info about various processes down to the name of the actual .exe that is running under the process and lets you kill the processes easily. Very useful if you really want to learn or figure out the what sub-process in a service host is tieing up resources. You would kill the subprocess, then disable the start up of the service if you don't want it to run in the future.

Also, it is very easy to convert a .exe into a service so don't assume these windows services are all microsoft services.

most people do not even notice that the services are running until one of the sub services hits a problem. Lots of them run when the system CPU is considered idle.

each instance of service host svchost.exe can provide one or more different services for your machine. (my windows 10 machine has 13 of them running 65 background services.)

to see what is rolled up in your host processes, start cmd.exe as an admin
then run
tasklist.exe /svc /fi "imagename eq svchost.exe"

on my windows 10 system I get this output showing the process id (pid) for the different copies of svchost.exe and what services are running under that host process.

the net effect is that you can not figure out what svchost.exe is doing unless you look at the various services that it is hosting.

you can also use a tool called process explorer from :
https://technet.microsoft.com/en-us/sysinternals/bb896653.aspx


C:\WINDOWS\system32>tasklist /svc /fi "imagename eq svchost.exe"

sorry about the formatting:

Image Name PID Services
========================= ======== ============================================
svchost.exe 868 BrokerInfrastructure, DcomLaunch, LSM,
PlugPlay, Power, SystemEventsBroker
svchost.exe 924 CoreUIRegistrar, RpcEptMapper, RpcSs
svchost.exe 400 AudioEndpointBuilder, DsSvc, hidserv,
NcbService, PcaSvc, SysMain, TrkWks,
UmRdpService, WdiSystemHost, wudfsvc
svchost.exe 532 CryptSvc, Dnscache, LanmanWorkstation,
NlaSvc, TermService
svchost.exe 1228 SSDPSRV, TimeBroker
svchost.exe 1236 Audiosrv, Dhcp, EventLog, Wcmsvc, wscsvc
svchost.exe 1332 Appinfo, AppMgmt, BITS, CertPropSvc, DoSvc,
gpsvc, iphlpsvc, LanmanServer, lfsvc,
ProfSvc, Schedule, SENS, SessionEnv,
ShellHWDetection, Themes, UserManager,
Winmgmt, wuauserv
svchost.exe 1340 EventSystem, FontCache, netprofm, nsi,
WdiServiceHost, WinHttpAutoProxySvc
svchost.exe 1952 BFE, DPS, MpsSvc
svchost.exe 1712 DiagTrack
svchost.exe 3624 OneSyncSvc_Session1,
PimIndexMaintenanceSvc_Session1,
UnistoreSvc_Session1, UserDataSvc_Session1
svchost.exe 4332 tiledatamodelsvc
svchost.exe 4848 ClipSVC

so my solution is to learn and understand what the task bar is saying. and to format it myself? or am I wrong x_x. also im assuming that yall are saying windows is a piece of shit. also is ther a website to learn about what it is saying? I looked at youre webpage thing and not sure I want to download more crap that I can just do if I understand myself. thanks for the help guys.