In the Windows Task Manager "Processes" tab, view the resource-intensive high SVCHOST.EXE process in the corresponding PID, the PID record. (If you do not see in Task Manager "PID", please select the menu "View" - "Column Settings", select the "PID" check box.)
With administrator privileges to run the command prompt (CMD.EXE), at the command prompt, run:
TASKLIST-SVC
You will see similar to the following results:
Image Name PID Services
SVCHOST.EXE 1104 DcomLaunch, TermServices
SVCHOST.EXE 1188 RpcSs
... ...
Control your Task Manager to see SVCHOST.EXE of the PID, in the above results to find the corresponding SVCHOST.EXE. For example, suppose you see the PID in Task Manager for the 1188's SVCHOST.EXE takes up more system resources, while the TASKLIST-SVC results show that PID is 1188's SVCHOST.EXE load service is RpcSs, namely, that RpcSs Service (Remote Procedure Call (RPC) service) occupy a higher system resources.
Method 2:
In the microsoft.com download the System Tools Process Explorer:
http://www.microsoft.com/technet/sysinternals/Utilities/ProcessExplorer.mspx (http://www.microsoft.com/technet/sysinternals/Utilities/ProcessExplorer.mspx)
Run Process Explorer, in the process list, find the occupier of the SVCHOST.EXE process in more system resources, right-click choose Properties (attributes), switch to the Services (Services) tab, where you can view the SVCHOST.EXE process in Canada what is contained in the system services.
With administrator privileges to run the command prompt (CMD.EXE), at the command prompt, run:
TASKLIST-SVC
You will see similar to the following results:
Image Name PID Services
SVCHOST.EXE 1104 DcomLaunch, TermServices
SVCHOST.EXE 1188 RpcSs
... ...
Control your Task Manager to see SVCHOST.EXE of the PID, in the above results to find the corresponding SVCHOST.EXE. For example, suppose you see the PID in Task Manager for the 1188's SVCHOST.EXE takes up more system resources, while the TASKLIST-SVC results show that PID is 1188's SVCHOST.EXE load service is RpcSs, namely, that RpcSs Service (Remote Procedure Call (RPC) service) occupy a higher system resources.
Method 2:
In the microsoft.com download the System Tools Process Explorer:
http://www.microsoft.com/technet/sysinternals/Utilities/ProcessExplorer.mspx (http://www.microsoft.com/technet/sysinternals/Utilities/ProcessExplorer.mspx)
Run Process Explorer, in the process list, find the occupier of the SVCHOST.EXE process in more system resources, right-click choose Properties (attributes), switch to the Services (Services) tab, where you can view the SVCHOST.EXE process in Canada what is contained in the system services.