svchost.exe는 Windows에서 다양한 기능을 수행하는 데 사용하는 기타 개별 서비스를 호스팅하거나 포함하는 컴퓨터 프로세스입니다.

쉽게 풀어서 말하면, Dll은 혼자서 동작을 못하니까, 임의의 EXE에서 호출하여 동작을 해야하는데, 윈도우에서 그 역할을 수행하는 것이 바로 Svchost.exe 입니다.

tasklist /svc를 입력해보면 아래와 비슷한 문자열이 출력이 됩니다.

이미지 이름                  PID 서비스                                      
========================= ====== =============================================
System Idle Process            0 N/A

시스템이 얼마나 유휴자원을 가지고 있는지 알려주는 프로세스               

                          
System                         4 N/A                                         

시스템? - 요기에 악성코드 sys화일이 등록되어 동작하기도 합니다.

smss.exe                    1204 N/A          

Windows NT Session Manager

사용자의 세션을 시작하는 것을 관여합니다.

이 프로세스는 Winlogin을 호출하거나, winlogin이 비정상적으로 종료하면 "hang"을 유발시킵니다.

c:\windows\system32\smss.exe에 보통 위치하고 있습니다.             

csrss.exe                   1256 N/A                                          \

Client Sever Runtime SubSystem or Process

윈도우 콘솔을 관장, 쓰레드를 생성/삭제, 16bit 가상 MS-DOS를 지원

winlogon.exe                1284 N/A                                         

Windows NT Logon Application 

services.exe                1328 Eventlog, PlugPlay               

Services and Controller app

lsass.exe                   1340 PolicyAgent, ProtectedStorage, SamSs            

(LSA Shell)          

svchost.exe                 1596 DcomLaunch, TermService     

Generic Host Process for Win32 Services                

svchost.exe                 1660 RpcSs     

Generic Host Process for Win32 Services                                    

svchost.exe                  164 AudioSrv, Browser, CryptSvc, Dhcp, dmserver, 
                                    EventSystem, FastUserSwitchingCompatibility, 
                                    Irmon, lanmanserver, lanmanworkstation,      
                                   Netman, Nla, RasMan, SENS, SharedAccess,     

                                   ShellHWDetection, TapiSrv, Themes, TrkWks,  
                                   winmgmt, wscsvc, wuauserv, WZCSVC           
EvtEng.exe                   724 EvtEng                                                            

svchost.exe                 1048 Dnscache                                    

spoolsv.exe                 1844 Spooler                                     

svchost.exe                 1040 WebClient                                                                 

inetinfo.exe                 1396 IISADMIN, W3SVC                                                                                  

ntmulti.exe                  708 Multi-user Cleanup Service                  

npkcmsvc.exe             908 npkcmsvc                                                           

OmniServ.exe              992 omniserv                                    

RegSrvc.exe                 1728 RegSrvc                                     

wdfmgr.exe                  1076 UMWdf                                                                                                                                                                                         

ctfmon.exe                  3556 N/A                                                                              

sqlmangr.exe                2008 N/A                                         

wuauclt.exe                 2628 N/A                                         

svchost.exe                 3512 SSDPSRV                                     

alg.exe                         4024 ALG                                         

wscntfy.exe                 2844 N/A                                         

conime.exe                  1752 N/A                                                                                                                             

ntaskldr.exe                3796 N/A                                         

svchost.exe                  264 stisvc                                      

hpcsvc.exe                  2328 hpcsvc                                      

hsvcmod.exe                 2264 hsvcmod                                                                                                                             

HFACSvc.exe                 3596 HFACSVC