It also shows you which services are associated with a given svchost, although there is no breakdown on the CPU use of individual services. If you select "properties" (right click on the svchost entry) you can look at the DLLs and threads associated with each svchost process - that might help.