Processes > svchost.exe
Download Glary Utilities for free to end/block Windows processes to improve your computer's performance *100% Clean & Safe

svchost.exe

File Name: svchost.exe
Usefulness Rating:
The Svchost.exe process (Generic Host Process for Win32 Services) is an integral part of Windows OS. It cannot be stopped or restarted manually. This process manages system services that run from dynamic link libraries (files with extension .dll). Examples for such system services are: "Automatic Updates", "Windows Firewall", "Plug and Play", "Fax Service", "Windows Themes" and many more.
Other instance of svchost.exe:
Because the svchost.exe process is used as a common system process, some malware often uses a process name of "svchost.exe" to disguise itself. Determining the image path of a process, and its invoking command line, can help identify software masquerading in this way, and help locate the actual program file which is running under the assumed process name of "svchost.exe" (MS Windows allows multiple processes to all display the same name). Some malware inject a .dll file into the authentic svchost process, for example Win32/Conficker worm.
Recommendation:
It is not recommended to stop or remove the svchost.exe process. If the process svchost.exe uses high cpu resources, it is mostly because the service "Automatic Updates" is downloading some new Windows update. But having a 99% or 100% cpu usage could be caused by downloads due of some hidden malware on your computer. Some malware like the Conficker worm changes the Windows Registry so that svchost loads the malware .dll file. In this case you only see the authentic svchost.exe process in the task manager! Use malware removers to remove this immediately.
Users Opinions:
Gennessis
6 0 Report Abuse
What is svchost.exe And Why Is It Running? You are no doubt reading this article because you are wondering why on earth there are nearly a dozen processes running with the name svchost.exe. You can't kill them, and you don't remember starting them… so what are they? So What Is It? According to Microsoft: "svchost.exe is a generic host process name for services that run from dynamic-link libraries". Could we have that in english please? Some time ago, Microsoft started moving all of the functionality from internal Windows services into .dll files instead of .exe files. From a programming perspective this makes more sense for reusability… but the problem is that you can't launch a .dll file directly from Windows, it has to be loaded up from a running executable (.exe). Thus the svchost.exe process was born. Why Are There So Many svchost.exes Running? If you've ever taken a look at the Services section in control panel you might notice that there are a Lot of services required by Windows. If every single service ran under a single svchost.exe instance, a failure in one might bring down all of Windows… so they are separated out. Those services are organized into logical groups, and then a single svchost.exe instance is created for each group. For instance, one svchost.exe instance runs the 3 services related to the firewall. Another svchost.exe instance might run all the services related to the user interface, and so on. So What Can I Do About It? You can trim down unneeded services by disabling or stopping the services that don't absolutely need to be running. Additionally, if you are noticing very heavy CPU usage on a single svchost.exe instance you can restart the services running under that instance. The biggest problem is identifying what services are being run on a particular svchost.exe instance… Checking From the Command Line (Vista or XP) If you want to see what services are being hosted by a particular svchost.exe instance, you can use the tasklist command from the command prompt in order to see the list of services. tasklist /SVC The problem with using the command line method is that you don't necessarily know what these cryptic names refer to. Checking in Task Manager in Vista You can right-click on a particular svchost.exe process, and then choose the "Go to Service" option. Disabling Services Open up Services from the administrative tools section of Control Panel, or type services.msc into the start menu search or run box. Find the service in the list that you'd like to disable, and either double-click on it or right-click and choose Properties.
SLAPDOG3
0 0 Report Abuse
i have 4,guess i'm lucky
XERA
1 0 Report Abuse
Es totalmente normal que Svchost.exe se ejecute al mismo tiempo. Lo que no es normal es que esté fuera de C:\\WINDOWS\\SYSTEM32. Clicar sobre el archivo o proceso en cuestión,clicar en propiedades o en más detalles,dependiendo del administrador de procesos que tengais, y fijaros en la ruta que tiene, si no es C:\\WINDOWS\\SYSTEM32 entonces puedes tener un problema. Lo que tienes que hacer,para salir del paso,es abrir el BUSCADOR de WINDOWS,en BUSCAR ARCHIVOS Y CARPETAS pones el nombre entero del proceso incluida su extensión,marcas para que busque por todo tu sistema,incluidos archivos ocultos,comprimidos,etc.. OSEA TODO. Y esperas a que termine la búsqueda.Una vez terminada buscas el archivo que sea el BUENO, el que tiene que aparecer en ; C:\\WINDOWS\\SYSTEM32 . Ese ni lo tocas. Ahora a todos los demás les CAMBIAS de NOMBRE,POR EJEMPLO poniendo un número antes de la extensión; svchost1.exe , svchost2.exe,etc.. y así a todos los que sean iguales.NO LOS ELIMINES,algunos serán válidos, sobre todo si tienes instalado el servipack2 de windows.Pues ya está, una vez que has puesto un numerito a cada archivo,EXCEPTO AL BUENO cierra todo y reinicia el ordenador. De ésta manera cuando reinicies se cargará el archivo BUENO y los otros quedarán en el olvido.Para saber cual de los "MALOS" es perjudicial lo que tienes que hacer es el proceso inverso.Osea abrir el BUSCADOR de WINDOWS, buscar los archivos y una vez encontrados les quitas eL número y los dejas COMO ESTABAN.Ahora sólo les tienes que pasar un ANTI-VIRUS A LOS ARCHIVOS Y LISTO. Si el ANTI-VIRUS no te elimina todos, es por lo que ya he comentado antes,el archivo o archivos"en teoría" no son corruptos son parte del servi-pack de windows y para que estos archivos no interfieran en un futuro, los dejas DONDE ESTAN pero les vuelves a poner un numerito antes de la extensión.Estos te podran servir de copia de seguridad en caso de que el BUENO se pierda o lo borres accidentalmente.Sólo tendrás que quitarle el numerito y enviarlo a la ruta donde estaba el PERDIDO.Si esto ocurre, y tienes más de dos archivos iguales,fijate antes en la versión, pues la del ServiPack suele ser idéntica a la buena, la otra u otras suelen ser versiones inferiores y seguramente estaran en la ruta del desintalador del servi pack.Sirven lo mismo pero siempre una versión actualizada es una versión mejor. que quieres que te diga .. Pos nada .. menudo royo que he soltado... ea..!! a disfrutarlo.!!!
Emperor Darius
1 0 Report Abuse
Clean
meister
0 0 Report Abuse
The process is run at system startup and checks part of registry services to the list of services to be opened. In general, multiple instances of Svchost.exe process are implemented at the same time. Each of these bodies may contain a list of services. This grouping of services allows better control and debugging easier, but also cause some difficulties for users. This is because the same file name is used by viruses, spyware, Trojan horses and other malwares to conceal their activity.
Steve_F
0 0 Report Abuse
The process is annoying becasue we all do not understand it...smile....but it does bring up questions...why does Win XP have to run so many instances of the program.... interesting... older PC's may have several running while a new or fresh install only needs to run a couple for the OS....hummmm... the more internet connections that have passed along your pc increases the number too...wow...a flaw...hehe
IVAN ORTIZ
0 0 Report Abuse
Always look your task manager at lease once every time you use your computer, then try to remember which process are running normal; if your computer is having problems or the system is slow, check the process and check for new process running and kill the one is sucking all your memory. Be careful because some times malicious files can hide the dangerous, they take the name of a normal process to look like a windows system process; my opinion is get a very good antivirus, run a deep scan and don’t trust in the unusual files running in the task manager. More information
HighTech
0 0 Report Abuse
It is fine(its just a reg windows process that must be running), however, some malware uses the processes to attack you. Just get a good AV and run that. DO NOT KILL THE PROCESS, JUST DISCONNECT FROM THE INTERNET IF UR HAVING PROBS.
Art
0 0 Report Abuse
The fan in my cpu is always running all of a sudden and never stops. Is it because svchost.exe is using up 50% of my cpu memory? Please help…
Ricky
0 0 Report Abuse
safe
First Previous 1 2 3 4 5 6 7 8 9 10 11 12 13 Next Last
Please click to rate it.

Not useful Useful

The link is not a valid url.

Glarysoft uses cookies to improve content and ensure you get the best experience on our website. By continuing to use this website, you agree to our privacy policy.

Got it