Was finding a lot of svchost.exe process getting lauched. To find out the services for each of the scvhost process, following command was helpful.
D:\>tasklist /svc
Image Name PID Services
========================= ====== =============================================
System Idle Process 0 N/A
System 4 N/A
smss.exe 820 N/A
csrss.exe 892 N/A
winlogon.exe 920 N/A
services.exe 976 Eventlog, PlugPlay
lsass.exe 988 Netlogon, PolicyAgent, ProtectedStorage,
SamSs
svchost.exe 1152 DcomLaunch, TermService
svchost.exe 1240 RpcSs
svchost.exe 1376 AudioSrv, CryptSvc, Dhcp, dmserver, ERSvc,
EventSystem, helpsvc, HidServ, lanmanserver,
lanmanworkstation, Messenger, Netman, Nla,
Schedule, seclogon, SENS, SharedAccess,
ShellHWDetection, Themes, TrkWks, W32Time,
winmgmt, wuauserv, WZCSVC
svchost.exe 1428 Dnscache
svchost.exe 1616 LmHosts, RemoteRegistry, SSDPSRV, WebClient
spoolsv.exe 1784 Spooler
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment