services dan svchost dalam windows

1- services adalah senarai services

2- svchost adalah process yg akan hostkan service. Ini berlaku jika service tersebut hanya ada dll file. (Bagi services yg ada exe file, tak perlukan svchost)


Contoh 1(Servis guna exe file)-----------------------

HKLM\SYSTEM\CurrentControlSet\Services\
-- ImagePath -> c:\dir\contoh.exe


Contoh 2 (Servis guna dll file)---------------------

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost
-- NetworkService: DNSCache lanmanworkstation DHCP

(Dnscache)
HKLM\SYSTEM\CurrentControlSet\Services\Dnscache
-- ImagePath : %SystemRoot%\system32\svchost.exe -k NetworkService -p

HKLM\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters
-- ServiceDll : %SystemRoot%\system32\dnsrslvr.dll

(LanmanWorkstation)
HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation
-- ImagePath : %SystemRoot%\system32\svchost.exe -k NetworkService -p

HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters
-- ServiceDll : %SystemRoot%\system32\wkssvc.dll

ref: https://web.archive.org/web/20150320155229/https://support.microsoft.com/en-us/kb/314056