Identify Loaded SVCHOST.EXE in Windows Task List

Credit to Reymond CC 

Many times I've been asked what is svchost or svchost.exe that's loaded in Windows?

Svchost as the name implies stands for "Service Host". Many of components of the Windows operating system are implemented as what are called "services", a fancy name for programs that run in the background and aren't necessarily associated with whomever is logged into the machine. A fair number of those services are implemented in DLLs rather than in stand-alone executables. Since DLL can't run on its own, svchost is the one that loads the DLL.

Problem with svchost.exe nowadays is the common disguise used by malware to hide its presence from the user. As you can see from the image below, the svchost.exe doesn't show up much information in Windows Task Manager. You wouldn't even know if it is loading a legitimate DLL or not…

Here's how to identify what's really running as Svchost.exe on Windows XP Professional.

In command prompt, type the command below and hit enter.

tasklist /svc /fi "imagename eq svchost.exe"

The service name is displayed on the right side of the tasklist result.

To do a final match up of the somewhat cryptic service name to something more meaningful, you'll need to go to the service browser in Windows. An easy way to get there when running XP is to right click on "My Computer", and select "Manage". This opens the "Computer Management" application. On the left side you'll see a variety of locations, but in this case, you'll need the last one, "Services and Applications". Expand that (use the +), and click on the first item, "Services".

Now comes the tricky part. You'll need to guess to try to match the human readable name of the service with Windows name of the service. For example, one of the named services in the list on my computer was PID 1404, Dnscache. I looked through the lists of names and the most likely service was "DNS Client". I double clicked on the entry which shows the properties for that service:

The "Service Name" exactly matches what I was looking for: Dnscache. Now I know that PID 1404 is the Dnscache service.

What you want to see there is that the executable that is being run is "svchost.exe". In this case, PID 1404 is the DNS Client service. If you're not using Windows XP Professional, you might not have the "tasklist.exe" to display the task list. You can download tasklist.exe from here.

If you find it too troublesome, of course there's an easier way. Use Process Explorer by Sysinternals. Just move your mouse over on top of the svchost.exe and a balloon message will tell you the service name.

LOTR marathon

  Thank's God it's Friday, i woke up around 8:20am i smell the shit of mickey "my cat" puno na pala ng etsas yung buhangin nya kaya kakaiba na ang amoy, i change the sand and after that i ate breakfast "maggi noddles with egg" mmm… sarap ok na din, tulog pa si erpat kaya ako lang ang nag agahan. around 10:20am we started to watch movies pinag patuloy namin yung SAW II, badshot may problema yung file hindi sya stand alone player compliant i try to re-encode it pero kulang ng codec's yung laptop ni erpat. Decide to watch Lord of The Ring 1,2,3 nalang hindi kopa kasi ito napapanood kaya yun nalang ang pinag tripan namin ni erpat. ok naman galing ng graphics, animation, story line and mga cast, ang haba ng movie na ito nasa LOTR 1 palang kami and nagugutom na wala pa pala kaming pagkain for lunch, so i pause the movie for a while and grilled the beef mabilis lang maluto manipis lang kasi yung meat, iniwan muna namin ni erpat yung grilled beef sa ihawan with hot lava stone on it pero patay na ang apoy and continue the marathon, after finishing the LOTR 1 we are ready to take lunch sarap ng ulam… and suddenly nung binalikan ko yung grilled beef naging parang uling na sya dammit!, nasobrahan sa luto mali kami dapat di namin iniwan sa hot lava stone yung beef sayang kaunti lang ang nakain kasi ang tigas na nya buti nalang save by the bell, we still have the leftover chicken na ulam namin kagabi. after lunch we started LORT 2 and i was amazed of the cast napakaraming extrang mga orcs and warrior ginastusan talaga, ang haba ng movie ang sarap panoorin nakatamaran na naming umalis ni erpat kasi plano naming mag punta ng fish market kaya lang nakakabitin eh meron pang LORT 3 so we decided na bukas nalang mamili ng isda.  so we finish the last part and it was 3 hours for the LORT3. sumakit ang likod ko at gabi na pala, damn nakalimutan ko palang maligo.

beating the wall

  Thursday and its tennis time  napaaga ang dating namin sa court tamang tama wala pang katao tao kami palang, kahit na napaka init eh sabak agad kami sinubukan agad namin sa court, pagkakataon namin mag praktis lumipad man ang bola eh hindi nakakahiya kasi wala namang nakakakita kundi kami lang. Sobrang naubos ang lakas ko sa sobrang init ng araw kaya tumigil na muna kami matapos ang 30mins na laro, novice palang syempre kaya hindi pa gaanong marunong, nagsi datingan na ang mga marurunong mag laro pahinga muna kami, kakainggit nga yung isang player dun kala mo model ng adidas mula ulo hanggang paa eh branded ang suot samantalang ako eh short na nahuhubo ang suot ko, paano nakalimutan ko yung belt ko kaya kada palo eh syang taas ng short ko. nung na occupied na ung court nagwalling muna kami, napagod ako ng husto tagaktak ang pawis at nabawasan ang cholesterol ko, ang hirap palang mag praktis sa walling lalo na kapag palaging lumilipad ang bola mo sa kabilang tennis court. ang nakaka inis pa eh yung net sa pinaka tuktok ng wall eh butas kaya lumulusot dun yung mga bola ko akala ko kasi pataasan ng lipad ng bola ang pina praktis ko naisip ko nag tetenis pala ako, ang layo pa naman ng lalakarin bago mo makuha ang tennis ball. buti nalang merong isang senior dun na tinuruan kami ni Dex  "kasama kong nag papraktis na gigil na gigil kung pumalo sa bola" kung paano ang tamang pag palo ng bola, hindi daw basta palo ka ng palo kailangan daw eh i swing mo ng maigi yung braso mo at tsempohan ang paparating na bola sa iyo. isa pang tip nya eh dapat daw maganda kang pumorma sa pagpalo ng bola kapag back hand dapat alalayan mo ng isang kamay para nga namang mukhang professional ang dating. kasi daw kapag single hand ka lang pumalo eh panget daw tingnan at mukha ka daw palaging nakaka tsamba. salamat sa tip ni manong.

tsaa-rabo-kla

curious siguro kayo kung ano ang itsura ng isang arabong imbis na babae ang hilig eh sa lalake pa nagkakagusto, arabong kamukha ni Boy George, arabong mukhang tsaa, in short tsaa-rabo-kla.

ang pangalan nya ay Jamal trabahador dito yan sa factory walang ginawa yan kundi mag tsaa sa umaga pag pasok, mag tsaa kapag 9:15am, mag tsaa sa tanghalian, mag tsaa kapag tapos ng sala "prayer in arabic" mag tsaa ng 2pm, mag tsaa ng 3:15 at bago pa yan umuwi mag tsa-tsaa pa ulit yan. kaya mukhang tea bag na nga ang itsura nya eh. isa pang nakakatawa sa kanya eh attracted sya sa mga pilipinong trabahador dito. meron syang crush sa finishing dept. pero di nya alam eh magka-baro lang sila kaya yun galit daw sa kanya yung crush nya.

mabait naman sya di naman nangangagat yun nga lang ang problema sa kanila sobrang tatamad nila pag dating sa trabaho, mas nau-uubos ang oras nila sa pag tungga ng tsaa. 

HDD player a perfect portable entertainment box with MPEG4 playback.

This is my HDD Multi Media Player loaded with 320gb SATA HD,
imagine you can store more than 300+ high quality movies
of xdiv, divx format if you can compress it to 700mb each movie.
Must have for the movie collector addik like me,
it can play also sounds and photo slideshow.
here are some brief description of this HDD Multi Media Player.

 USB 2.0 AV Out Plays Video, Music and display picture files.

   1. Video media format supported: VCD, DVD, MPEG1-4, DIVX3.X-5.X , XDIV
   2. Audio media supported: MP3
   3. Image media supported: JPEG, BMP, GIF
   4. File Formats: AVI, ASF, VOB, DAT, MP4, MPG
   5. File System: FAT32, NTFS
   6. Audio out: Stereo 2 Ch (RCA)
   7. Supports TV type PAL and NTSC
   8. 480Mbps high-speed USB 2.0
   9. Supports Windows ME/XP/98, OS-9/X, Linux
  10. Supports software firmware upgrade online
  11. Supports IDE 133 HDD  or SATA HDD storage capacity up to 500GB
  12. Plug & Play and Hot Swap
  13. Subtitle Support: SMI, SUB, SRT, TXT, PSB, ASS, SSA
  14. Video out: Composite (RCA)/S-Video/VGA
  15. Supports 7 preset Music EQ
  16. Supports Music/Photo Slide Show and lrc MP3 lyric display
  17. Supports files copy, rename, delete
  18. Fan and color LCD display inside
  19. Panel key control / Remote control
  20. Power: 100~240V AC IN; 5V/2A 12V/2A DC OUT
  21. Aluminum & plastic case lightweight

HDD player is a portable USB harddisk box with media player function,
this HDD Media player works as a normal USB hard disk box, as well as
a portable media player which can play back MPEG 1, MPEG 2, MPEG 4,
JPEG, MP3, Divx format files on your TV and Monitor.
It use 3.5" Hard Drive as it storage. It support FAT32/NTFS format
you can use it to store computer file just like normal hard drive enclosure.

HDD player is a perfect portable entertainment box with MPEG4  playback.

tabaching-ching Khate

this is khate my pamangkin kaka 3 months old palang nya last july 28. ang cute diba at ang taba taba nya, actually diko pa sya talaga nakikita sa mga pictures lang. pag nakita ko na sya siguro 1year old na sya at baka nag lalakad na hehe. be a good girl ha wag kang magiging pasaway.

sand storm

hapon na pero di padin tumitigil ang sandstorm dito, kaya eto kulong ako dito sa kwarto at sa opis. gusto konang umuwi nakaka inip, normal na ang ganitong  panahon dito pero ang hindi normal ay ang…

umulan ng ganito…