"Each instance of Svchost process [you see in Task Manager] launches a list of services. Multiple instances of Svchost.exe can run at the same time. Four or five instances of svchost.exe is normal. If you want to see what services are run by each Svchost process:
For XP Professional, using the Tasklist command:
1. Click Start, Run and type cmd
2. Type Tasklist /svc >C:\TaskList.txt
3. The TaskList.txt will contain the services list (launched by each Svchost process)"