Svchost.exe is a generic host process name for services that are run from dynamic-link libraries called DLLs. This is a valid system process that belongs to the Windows Operating System which handles processes executed from DLLs. At startup, Svchost.exe checks the services portion of the registry to construct a list of services that it needs to load. Multiple instances of Svchost.exe can run at the same time. The file is located in the %SystemRoot%\System32 folder.
To view the list of services that are running in Svchost:
1. Click Start on the Windows taskbar, and then click Run.
2. In the Open box, type CMD, and then press ENTER.
3. Type Tasklist /SVC, and then press ENTER.
For information about tasklist.exe, type the following at the XP command prompt: tasklist /?
For more information about a process, type the following command, and then press ENTER:
Tasklist /FI "PID eq processID" (with the quotes)
You can also download and use Process Explorer by Sysinternals to investigate all processes and gather additional information to identify and resolve problems:http://www.sysinternals.com/Utilities/ProcessExplorer.html
Having svchost run as a startup is usually a bad sign. There are multiple malware types responsible for this. See here: http://castlecops.com/modules.php?name=Sta...ery=SVCHOST.EXE
Are you sure they are listed in startups or as running processes?