Troubleshooting SVCHOST Problems
Microsoft's "Ask the Performance Team" Blog includes a fantastic piece on troubleshooting SVCHOST problems. As you should know, SVCHOST is one of the wrapper processes within which many Windows services are run. The problem with wrapping services in this way is in finding out exactly which service is acting up when problems occur.
From the piece, "The first thing to do is understand which services are mapped to which instance of SVCHOST.EXE. Using the TASKLIST.EXE utility we can determine which services belong to which instance. The command syntax is: tasklist /SVC /FI IMAGENAME eq svchost.exe'."
The result from this command will...
...show you the process ID (PID) associated with the instance of SVCHOST that is related to each service currently running. From there, you can match up that PID with those in Task Manager (or any other troubleshooting tool). Note that the PID column isn't natively presented in Task Manager. Click View, then Select Columns to display it.
Another troubleshooting step can be to isolate the process away from its usual shared SVCHOST instance. Click here to read the full article with further information about how to use the sc command to do this.
Email This!
Digg it!
Sphere it!
Del.icio.us
Reddit!
Newsvine