This may help you see what services svchost.exe's are related to:
1. Open Task Manager, select View | Select Columns | check PID (Process Identifier) | Select OK | Leave Task Manager Open
2. Open command Prompt and type "tasklist /SVC" (without quotes). This will expose the Image Name, PID, and Services.
3. Compare the PID from the DOS window with the PID in Task manager to see what the svchost.exe services are running.
"Modified view of the DOS session window "
(C) Copyright 1985-2001 Microsoft Corp.
C:\>tasklist /svc
| Image Name |
PID |
Services |
| System Idle Process |
0 |
N/A |
| System |
4 |
N/A |
| smss.exe |
848 |
N/A |
| csrss.exe |
912 |
N/A |
| winlogon.exe |
936 |
N/A |
| services.exe |
980 |
Eventlog, PlugPlay |
| lsass.exe |
1000 |
Netlogon, PolicyAgent, ProtectedStorage, |
| |
|
SamSs |
| svchost.exe |
1224 |
DcomLaunch, TermService |
| svchost.exe |
1284 |
RpcSs |
| svchost.exe |
1408 |
AudioSrv, BITS, CryptSvc, Dhcp, dmserver, |
| |
|
ERSvc, EventSystem, helpsvc, HidServ, |
| |
|
lanmanserver, lanmanworkstation, Netman, |
| |
|
Nla, Schedule, seclogon, SENS, |
| |
|
ShellHWDetection, srservice, Themes, TrkWks, |
| |
|
w32time, winmgmt, wuauserv, WZCSVC |
| svchost.exe |
1460 |
Dnscache |
| svchost.exe |
1568 |
LmHosts, RemoteRegistry, SSDPSRV, WebClient |
| ccEvtMgr.exe |
1680 |
ccEvtMgr |
| ccSetMgr.exe |
1732 |
ccSetMgr |
| SNDSrvc.exe |
1760 |
SNDSrvc |
You can also use tools like "PsList" from Sysinternals Utilities located here: http://www.microsoft.com/technet/sysinternals/Processesandthreadsutilities.mspx