"Rene Erichsen" <erichsen@tdcadsl.dk> wrote in message
news:3d4bedd8$0$43676$edfadb0f@dspool01.news.tele.dk...
> Windows XP! Når jeg logger på med administratorrettigheder (og
kun der),
> starter der nogle processer, fire af dem kaldes "svchost.exe".
Jeg ved at de
> hver især dækker over en samling styringsprocesser.
> Den tredje "svchost.exe" på proceslisten tager efter et halvt
minut
> pludselig 99% af CPU-kraften og der bliver den og sløver
systemet meget..
> Jeg har prøvet alt, startet og stoppet alle mulige processer,
fjernet alt i
> opstart (msconfig).
> Jeg aner ikke hvad jeg skal stille op. Nogle forslag?
Mon ikke du kunne have fundet hjælp i Hjælp:
A Description of Svchost.exe in Windows XP
The information in this article applies to:
a.. Microsoft Windows XP Professional
For a Microsoft Windows 2000 version of this article, see
Q250320.
Summary
This article describes Svchost.exe and its functions. Svchost.exe
is a generic host process name for services that run from
dynamic-link libraries (DLLs).
More Information
The Svchost.exe file is located in the %SystemRoot%\System32
folder. At startup, Svchost.exe checks the services portion of
the registry to construct a list of services that it needs to
load. Multiple instances of Svchost.exe can run at the same time.
Each Svchost.exe session can contain a grouping of services, so
that separate services can run, depending on how and where
Svchost.exe is started. This allows for better control and easier
debugging.
Svchost.exe groups are identified in the following registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Sv
chost
Each value under this key represents a separate Svchost group and
is displayed as a separate instance when you are viewing active
processes. Each value is a REG_MULTI_SZ value and contains the
services that run under that Svchost group. Each Svchost group
can contain one or more service names that are extracted from the
following registry key, whose Parameters key contains a ServiceDL
L value:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\
To view the list of services that are running in Svchost:
1.. Click Start on the Windows taskbar, and then click Run.
2.. In the Open box, type CMD, and then press ENTER.
3.. Type Tasklist /SVC, and then press ENTER.
Tasklist displays a list of active processes. The /SVC switch
shows the list of active services in each process. For further
information about a process, type the following command, and then
press ENTER:
Tasklist /FI "PID eq " (with the quotation marks)
The following example of Tasklist output shows two instances of
Svchost.exe that are running.
Image Name PID Services
=================================================================
=======
System Process 0 N/A
System 8 N/A
Smss.exe 132 N/A
Csrss.exe 160 N/A
Winlogon.exe 180 N/A
Services.exe 208
AppMgmt,Browser,Dhcp,Dmserver,Dnscache,
Eventlog,LanmanServer,LanmanWorkstation,
LmHosts,Messenger,PlugPlay,ProtectedStorage,
Seclogon,TrkWks,W32Time,Wmi
Lsass.exe 220 Netlogon,PolicyAgent,SamSs
Svchost.exe 404 RpcSs
Spoolsv.exe 452 Spooler
Cisvc.exe 544 Cisvc
Svchost.exe 556 EventSystem,Netman,NtmsSvc,RasMan,
SENS,TapiSrv
Regsvc.exe 580 RemoteRegistry
Mstask.exe 596 Schedule
Snmp.exe 660 SNMP
Winmgmt.exe 728 WinMgmt
Explorer.exe 812 N/A
Cmd.exe 1300 N/A
Tasklist.exe 1144 N/A
The registry setting for the two groupings for this example are
as follows:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows
NT\CurrentVersion\Svchost:
Netsvcs: Reg_Multi_SZ: EventSystem Ias Iprip Irmon Netman
Nwsapagent Rasauto Rasman Remoteaccess SENS Sharedaccess Tapisrv
Ntmssvc
RApcss :Reg_Multi_SZ: RpcSs
First Published: Dec 5 2001 3:19PM
Keywords: kbtool kbinfo
|