chris
| my comp is wiggin
|
Franta
| Microsoft® Windows® Operating System
|
Rocks25
| svchost.exe is a system process belonging to the Microsoft Windows Operating System which handles processes executed from DLLs. This program is important for the stable and secure running of your computer and should not be terminated.
|
need help
| i have several (5) svchost.exe's running in my system.. is this just normal? the 5 processes are running in a range of 4MB to 25MB memory.. please help me here.. tnx!
|
Joreel
| Yes it's normal, I have 4 running at any one time.
|
Sondo
| why svhost.exe is not trustworthy?
|
TheCric
| You can't know exactly about svchost but by interrogating Windows itself . Some services launched by Svchost are mandatory. Get the script file and launch it to have more infos : http://thecric.free.fr/WMI/Services/Services%20from%20svchost.exe.vbs
This link is in french (sorry ;-)
More information
|
Mike
| The svchost.exe file is located in the folder C:\Windows\System32. In other cases, svchost.exe is a virus, spyware, trojan or worm!
|
jarfil
| Windows system service
|
sam
| i ended this once as i did not know what it was for... and i had to reformat my comp. oops
|
joe
| remove or repair svchost.exe
|
Gil
| Sistema operacional, programa OK
|
r0ut3r
| Don't terminate this active proccess and don't delete, is functionally to system services (Audio of Windows, firewall of Windows). If neccesary, you can repair this svchost.exe with antivirus software or anti-spyware software.
|
Morgan Sim
| ???HELP???
I don't know what svchost.exe is for and why Do I have 5(Five)of it running in my system? Is it really neccessary to have so many repeats? This process is eating up most of my memory! Can somebody pls help?
|
VicAnna
| El proceso se ejecuta al iniciar el sistema, y chequea parte de los servicios del registro para hacer la lista de servicios que deben abrirse. Por lo general, múltiples instancias del proceso Svchost.exe son ejecutadas al mismo tiempo. Cada una de estas instancias puede contener un grupo de listas de servicios.
Este agrupamiento de servicios permite un mejor control y fácil depuración, pero también causa algunas dificultades a los usuarios. Esto se debe a que el mismo nombre de archivo es utilizado por virus, espÃas, caballos de troya y otros malwares para ocultar su actividad.
|
MAt
| i have 11 host process for windows services (svchost.exe) is this normal please help im going crazy
|
Guffe
| Yes it is normal to have a ton of these. Don't ask me why, its a microsoft thing. More information
|
Chandra Mohan
| May be it is trustworthy, but same named virus was effect my computer , it create duplicate exe files look like folder and while try to open that folder! it took no result and slow down the computer. Must check and decide it is virus or not.
|
pf1017
| It would be nice if Microsoft could comment! It would sae all tis hassle.
|
R Phillips
| as this file can be used to hide other programs such as malware, this makes svchost a risk, while it is a part of the WinXp OS. it is manipulated by Malware programmers
|
Geckoshome
| I got 5 of them runnin and why the the hell
do i need 5 of them!
|
meister
|
The process is run at system startup and checks part of registry services to the list of services to be opened. In general, multiple instances of Svchost.exe process are implemented at the same time. Each of these bodies may contain a list of services. This grouping of services allows better control and debugging easier, but also cause some difficulties for users. This is because the same file name is used by viruses, spyware, Trojan horses and other malwares to conceal their activity.
|
Gennessis
| What is svchost.exe And Why Is It Running?
You are no doubt reading this article because you are wondering why on earth there are nearly a dozen processes running with the name svchost.exe. You can't kill them, and you don't remember starting them… so what are they?
So What Is It?
According to Microsoft: "svchost.exe is a generic host process name for services that run from dynamic-link libraries". Could we have that in english please?
Some time ago, Microsoft started moving all of the functionality from internal Windows services into .dll files instead of .exe files. From a programming perspective this makes more sense for reusability… but the problem is that you can't launch a .dll file directly from Windows, it has to be loaded up from a running executable (.exe). Thus the svchost.exe process was born.
Why Are There So Many svchost.exes Running?
If you've ever taken a look at the Services section in control panel you might notice that there are a Lot of services required by Windows. If every single service ran under a single svchost.exe instance, a failure in one might bring down all of Windows… so they are separated out.
Those services are organized into logical groups, and then a single svchost.exe instance is created for each group. For instance, one svchost.exe instance runs the 3 services related to the firewall. Another svchost.exe instance might run all the services related to the user interface, and so on.
So What Can I Do About It?
You can trim down unneeded services by disabling or stopping the services that don't absolutely need to be running. Additionally, if you are noticing very heavy CPU usage on a single svchost.exe instance you can restart the services running under that instance.
The biggest problem is identifying what services are being run on a particular svchost.exe instance…
Checking From the Command Line (Vista or XP)
If you want to see what services are being hosted by a particular svchost.exe instance, you can use the tasklist command from the command prompt in order to see the list of services.
tasklist /SVC
The problem with using the command line method is that you don't necessarily know what these cryptic names refer to.
Checking in Task Manager in Vista
You can right-click on a particular svchost.exe process, and then choose the "Go to Service" option.
Disabling Services
Open up Services from the administrative tools section of Control Panel, or type services.msc into the start menu search or run box.
Find the service in the list that you'd like to disable, and either double-click on it or right-click and choose Properties.
|
XERA
| Es totalmente normal que Svchost.exe se ejecute al mismo tiempo. Lo que no es normal es que esté fuera de C:\WINDOWS\SYSTEM32. Clicar sobre el archivo o proceso en cuestión,clicar en propiedades o en más detalles,dependiendo del administrador de procesos que tengais, y fijaros en la ruta que tiene, si no es C:\WINDOWS\SYSTEM32 entonces puedes tener un problema. Lo que tienes que hacer,para salir del paso,es abrir el BUSCADOR de WINDOWS,en BUSCAR ARCHIVOS Y CARPETAS pones el nombre entero del proceso incluida su extensión,marcas para que busque por todo tu sistema,incluidos archivos ocultos,comprimidos,etc.. OSEA TODO. Y esperas a que termine la búsqueda.Una vez terminada buscas el archivo que sea el BUENO, el que tiene que aparecer en ; C:\WINDOWS\SYSTEM32 . Ese ni lo tocas. Ahora a todos los demás les CAMBIAS de NOMBRE,POR EJEMPLO poniendo un número antes de la extensión; svchost1.exe , svchost2.exe,etc.. y asà a todos los que sean iguales.NO LOS ELIMINES,algunos serán válidos, sobre todo si tienes instalado el servipack2 de windows.Pues ya está, una vez que has puesto un numerito a cada archivo,EXCEPTO AL BUENO cierra todo y reinicia el ordenador. De ésta manera cuando reinicies se cargará el archivo BUENO y los otros quedarán en el olvido.Para saber cual de los "MALOS" es perjudicial lo que tienes que hacer es el proceso inverso.Osea abrir el BUSCADOR de WINDOWS, buscar los archivos y una vez encontrados les quitas eL número y los dejas COMO ESTABAN.Ahora sólo les tienes que pasar un ANTI-VIRUS A LOS ARCHIVOS Y LISTO. Si el ANTI-VIRUS no te elimina todos, es por lo que ya he comentado antes,el archivo o archivos"en teorÃa" no son corruptos son parte del servi-pack de windows y para que estos archivos no interfieran en un futuro, los dejas DONDE ESTAN pero les vuelves a poner un numerito antes de la extensión.Estos te podran servir de copia de seguridad en caso de que el BUENO se pierda o lo borres accidentalmente.Sólo tendrás que quitarle el numerito y enviarlo a la ruta donde estaba el PERDIDO.Si esto ocurre, y tienes más de dos archivos iguales,fijate antes en la versión, pues la del ServiPack suele ser idéntica a la buena, la otra u otras suelen ser versiones inferiores y seguramente estaran en la ruta del desintalador del servi pack.Sirven lo mismo pero siempre una versión actualizada es una versión mejor. que quieres que te diga .. Pos nada .. menudo royo que he soltado... ea..!! a disfrutarlo.!!!
|
the truth
| yeah. its needed. i have like 7 of them all running at once. they do no harm at all.
|
SLAPDOG3
| i have 4,guess i'm lucky
|
Emperor Darius
| Clean
|
:)
| I have 8, and I am suspicious. I have a good AV, firewall, anti-spybot, ad-aware, and I am not so lucky
|
wu yiren
| i have 15 svchost.exe. anybody can tell me tat y have have lots of it... my OS is Window Vista
|
B. L
| To "Gennessis". In my opinion, your explanation is excellent. Thank You!
|
brainpup
| Hey Gennessis thats the best explanation I've ever seen about Svchost.exe, I've always know that it was used by Windows to run all the services that run in the background, I just never figured out why I have 6 of them running at once. But now that you mentioned it, its a good thing that all those services aren't running under one roof or we'd have more crashes than we do with Windows. NOTE: to those of you that are getting all of your RAM eatin up by Svchost.exe...do like I did and add more RAM, I've got 1.8 GB and I don't even notice the 6 svchost.exe I've got running all the time plus the other 34 processes for a total of 40 always running when I look at my task manager.
|
totally confused guy
| I have 15 of svchost.exe processes running!!!!
I have Vista business I have scanned my computer with many different antivirus software's including Norton (which I hate), McAffee (it's alright), AVG Free (best free version ever), and my favorite...Kaspersky. So far, no virus/trojan/worm/spyware/etc. have been found so i don't know why so many of these processes are running at once.
is there a way to limit the number of svchost.exe processes running? thx
|
Adam
| Totallt trustworthy. svhost.exe is the virus. not svchost.exe
|
George
| One of my svchost is using 99% of my CPU, when connected to the internet.
|
IVAN ORTIZ
| Always look your task manager at lease once every time you use your computer, then try to remember which process are running normal; if your computer is having problems or the system is slow, check the process and check for new process running and kill the one is sucking all your memory. Be careful because some times malicious files can hide the dangerous, they take the name of a normal process to look like a windows system process; my opinion is get a very good antivirus, run a deep scan and don’t trust in the unusual files running in the task manager. More information
|
Steve_F
| The process is annoying becasue we all do not understand it...smile....but it does bring up questions...why does Win XP have to run so many instances of the program.... interesting... older PC's may have several running while a new or fresh install only needs to run a couple for the OS....hummmm... the more internet connections that have passed along your pc increases the number too...wow...a flaw...hehe
|
HighTech
| It is fine(its just a reg windows process that must be running), however, some malware uses the processes to attack you. Just get a good AV and run that. DO NOT KILL THE PROCESS, JUST DISCONNECT FROM THE INTERNET IF UR HAVING PROBS.
|
Ricky
| safe
|
Art
| The fan in my cpu is always running all of a sudden and never stops. Is it because svchost.exe is using up 50% of my cpu memory? Please help…
|
Esther
| Ow...these lammers...:-)
|
StGeorge
| Genessis Put it very succinctly. Thanks for sharing
|
dale
| it's k everyone i have had 23 running in vista alone vitahas to many seveices
|
EyesOpen
| All sorts of snooping apps can be run under the guise of svchost.exe just as legitimate ones can. It hides the actual name of the program that it masks and reports only generic processes.
|
| Windows system service
|
Zach
| Genessis had a throughout explanation, heres a summary:
svchost.exe is used to start and host windows services and they are spread out so if one fails your entire computer does not crash therfore they are all nessesary.
|
Mbaill
| be very careful with these, once on a windows help forum some told me to terminate some of my svchost and since then I cant use my windows system tools(apphelp.dll just cant be found no more) but on the other hand I did have a trojan or worm (I'm not sure wich )running out of a svchost and it did fix that
|
Assassin
| To Gennessis: Thank you so much was very detailed and a great full explanation. Exactly what I needed to hear to figure out my problem. Thanks again partner!
|
Ilgaz
| Do not mess with them. You can hand pick and disable certain services via Administrator Tools in your control panel. That is it. They are almost core of the Windows.
|
Rafael Dutra
| windows start service, necessary
|
Elf
| clean many of them running.
|
Carsto
| Very suspicious about it, but Gennessis explained it very well. Clicked on More Information under Guffe's reply and got Uniblue selling a registry cleaner/defragger. Scan reports 763 errors, willing to clean 15. Glarysoft reported and fixed 6 for free. Who to believe? I run Firefox & Thunderbird through Filseclab Firewall (very flexible, setable, good control & reports, blocks like a backstop) plus avast! (auto updates on net connect, even reported Glary split files as nasties - several dot file extensions) and Spybot. In three years saw only about three viruses, didn't check cover discs. I now have 8 svchosts running. What's the gamble?
|
Mike
| I just wanted to thank Gennessis for taking the time to explain the svchost.exe file run process. It makes better sense now as to why there can be som many of these seem to be running at the same time. It seems that as time goes on and we begin to add more and more programs to our machine that these could be optimized a bit better. Possibly even if we could re-run the setup program for windows that it would optimize all of these different files and make the memory use and allocation a bit better. If Gennessis is still monitoring these posts I was curious as to his feedback on this. Could re-installing the latest service pack help optimize these processes?
*******I don't want anyone reading these posts to just start a re-install process on their OS. I am thinking off the top of my head hear and am always looking for better ways to make my machine to boot faster, and run more efficiently. Just because I am asking the questing here doesn't means that you should do this!! *******
|
Richie
| Obviously there are some people that need more programs running on their P.C's but dont know how to control which ones they need running in the background. Eg; you install software for a canon printer and theres like another dozen processes that run at startup , but you may not need that software running all the time so why not start it manually, and if it takes a little longer to startup then so what , at least you have less svhosts and resourses used to have a nicely running P.C :)
P.s Nicely said Gennessis
|
evgeny
| svchost.exe is Generic Host Process for Win32 Services this process is a key process and it must not stop if stopping key Services will stop like windows firewall w
|
smittenxx
| Gennessis,thanks for great explanation on this. There should be easier programs to clean up old files and remove them. I do this frequently, yet my disk space is hardly ever cleaned properly. Any suggestions? ta.
|
Zeapey
| After reading all this I feel a little better about svc. But I'm with Art up there, I have one that is running at 160mb and bounces between 20% and 50% cpu usage very sporadically. Could this be something disguised as ans svc process?
|
joyce jordan
| My comp goes off while I am typing. Help
|
Hadley
| Part of windows operating system
can be misleading as it can be replaced by virus
|
hacker_CT
| Sorry, I'm Spanish.. xD
svchost.exe, es un proceso de Windows, (mejor dicho, procesos) que inician los servicios de Windows. Además se encarga de abrir librerias DLL.
|
Willya
| I have TWELVE copies running right now. This can't be normal. Anything I can/should do? (They are all in the correct directory so they are the real deal.)
|
Moacir Alves
| O Svchost.exe é um processo de host do windows não deve ser finalizado, pois é muito importante...
Normalmente ficam de 4 a 7 processos no computador...mais de 7 pode ser virús, menos de 4 normal, mas é difÃcil de acontecer...
O ùnico problema é que muitos virús se ocultam nele...
E vão cada vez mais aumentando o número de Svchost's.exe
|
Пётр
| Почему таких процессов 4?
|
| confiavel
|
sirmerlin860
| when in doubt don't
this file is needed by windows
it has been abused in the past but in general; if you have to ask you shouldn't
|
andrew mcdonald
| to much trouble on vista
|
e-ZUAN
| i have used the Hijack this software, and i was in shocked ! Its say one of my registry , under service that is under c:\windows\system\svchost.exe is not by Microsoft Coop. It says " Darkness " - owner " Unknown Owner " definitely a virus ! If u guys does not believe me,try downloading Hijack This Software , btw, genesis is right so do Eyesopen !
|
The Watchman
| Thanks Gennessis. Now if I can just figure out where I left my car keys? Any help Gennessis?
LOL!!
|
Thumper1x
| Thanks Gennessis,
I have wondered about this one for a while.
plop plop fizz fizz oh what a relief it is!!
Hey you guys listen to Gennessis he is the (MAN) thanks again.
|
Gronk
| I understand that this is a standard Windows component, but one instance of it is permanently using 98 - 100% CPU. Killing it manually from Task Manager seems to be the only way to get the PC running again.
Curiously, this does not happen when I change the user to have Administrator priveleges - then 99% CPU is System Idle (as it should be). But it is too much of a security risk to leave it that way, so I change it back to a Limited user and can't do any work until I kill svchost again.
This is all happening in XP Pro, so I can't use Gennessis' suggestion for identifying the offending service. Using "tasklist /SVC" shows the offender as "N/A".
Can anybody offer any other suggestions?
|
bahadourian
| message d'erreur More information
|
Tom
| does not delete
|
justin
| reports actions that should be prvt. spyware from bigdawgs
|
drriquet
| i have 1 000 000 svchost.exe processes running !! Ho shit... i'm stupid, it's because 1 000 000 processes running....why my computer is so fat ?
|
eymard
| me aparece varias veces ya la reinicie y la verdad a un persiste el programa de verdad necesito elimirar la carpeta y crear una copia de este archivo para evitar los mailware
|
malfuz@hotmail.com
| 3
started as third process according to taskmanager and process manager (Gary Utilities)
|
Jeremiah 20:11
| GENNESSIS, thank you for your knowledgeable and detailed answer. It sounds like you know a thing or two about how Windows works.
XERA, thanks for doing the same in Spanish.
EYESOPEN, I agree. Just because these are legitimate groups of services doesn't mean that a rogue service, due to a virus or trojan, can't be hiding in there somewhere. I would submit that if one or more of these svchost.exe instances is hogging resources such as memory or processor, it's most likely an infection worth looking into using the information that Gennessis provided.
|
ghjghj
| it is bad and you need to delete them because they will crash the computer some how. NOW!!!!!!!!!
|
| Windows seems to have a lot of these for some reason
|
sam
| I have about 9 of these listed and they are all showing red at least 1/4 of the bar. WTF do we do with this, you would think MSoft would have fixed this crap by now. next time, Apple. This sucks, Vista sucks, have had tons of problems with freaken vista.
|
Sha
| I have 7 svchost.exe it takes 32% of my memory !!!!!!
|
hammertime
| 3 of svchost.exe seems to be the least number need to run. been able to cut down from initial (after start) 8, by cleaning out and disabling some services i don't need, manually.
one runs some udp connection i never use, can kill that using tcpview, always on port 1025, IF you don't use udp.
you have to learn about what service does what, it costs some time learning about windows, but you can slim down the ressource usage.
on the other hand, there has been some virus around in the wild running up one svchost.exe instance to 100% CPU usage. if so, scan your system.
|
Kevin Pounders
| I have 4 Generic Host For WIN32 Services, Should i delete them turn them off or leave them alone? More information
|
Brad
| memory hog
|
mike
| au xxI ème siècle, les dieux de l'informatique, pourraient prévoir un bouton, pour pouvoir obtenir 1 traduction compréhensible dans sa langue maternelle.
No comment!!!!!!!!!!!!!!!
|
jules
| uses LOTS of memory... ANYTIME my pc is acting crappy, 1 or more svchhost.exe processes is ALWAYS consuming the highest CPU/Peak Memory Usuage
|
mr.dontlikesvchost.exe
| i have like seven of them it takes over 25 of my memory even thought i have 4,2ram
|
Anne
| Can I make some or all of them a low priority without damaging my computer?
|
Fally
| Perchè ne esistono in esecuzione cosi' tanti?
|
jesuskaede
| Realentiza la computadora en general. Cuando lo termino la computadora se percibe más rapida.
El antivirus no detecta virus ni malware o spyware
|
creappro
| Some of you guys have GREAT patience! The redundancy of the svchost questions is much more epidemic than the redundancy of the svchost processes... especially since GENNESSIS has provided such a clear and detailed explaination.
|
