What is "svchost.exe"

Status
Not open for further replies.
Joined
May 15, 2006
Messages
2,593
Location
Lakeside CA and Lake Havasu City AZ
In my windows task manager under processes. svchost.exe is listed 4 times. Twice the user name is "system" and twice it is "network service". One of the "svchost.exe systems uses 90,464K of memory the rest are a little over 2K memory.

The problem is the one with the most memory at times takes over the computer and uses 98 to 100 percent of the CPU, and the computer takes forever to do anything, sometimes it just quits working. how do I fix this? Computer is 1 year old Gateway running windows XP on a high speed cable modem.
 
Each instance of svchost.exe process seen in the Task Manager hosts a group of services. To see the list of services hosted by each instance of svchost.exe, you may use the Tasklist.exe console utility available in Windows XP Professional Edition.

Click Start, Run and type CMD.EXE

Type tasklist /svc >c:\taskList.txt

The taskList.txt will contain the list of Processes, their Process IDs and the Services running under each Process.

Note: Tasklist.exe is not included in Windows XP Home Edition. You may use Process Explorer to view this information
WARNING: There are viruses circulating in the internet which uses the same name as svchost.exe. The legit svchost.exe will be present in the %windir%\system32 folder.
 
Systems and needs and some wants vary due to variables. Various variable that vary due to well..... variabilties.

Old Coot generally recommends AVG anti-spyware and Nod32 anti-virus along with implementing safe surfing practices and setting up thine e-mail reader to minimize infection via that route.

AdAware is good and is used along with Spybit Search and Destroy and the Comodo firewall.

Spyware Blaster also has a nook within my security set-up.

Opinions as to what optimizes a safe crud-free system varies among members of the human species.

As the neighbor above proclaims, steer clear of programs that declare your electronic brain is..... INFECTED!!!!!! EEEEEEEEK!!!!!!! And then want thee to buy their product. Too often the so-called infection does not exist.

In your case you may be infected and need to take the needed steps to oust that rascally varmint. But, it's best to stop the infection from the get-go.

Another place to learn about your possible infection:

http://www.wilderssecurity.com/index.php

Many places to obtain advice and guidance, not all equally as good.

Whatever thou doeth.... ensure hostile coding is removed, that is, if any actually is present; then.... do what is needed to keep the bad guys at bay.

Free products can work and work well. However, there are times when the cost for quality is well-worth the price.

At the least, ensure you have a good anti-virus.

And, look for a safe surfing guide so you can set thine machine up properly to avoid infection.

Of course, you may have already done everything required already so this advice is meaningless. That's okay. I'm used to that. Computer security is much akin to my love/sex life. Meaningless. Well, unless infected.

Ewwwwww!!!!!!!!!!!!!! INFECTED!!!!!!!!!!!!!!!!!!!!!

Ahem.

Don't worry, even the most proficient computer folks get infected time to time.

Good luck!!!!!!
 
svchost.exe is the most critical file in the windows xp operating system. Yet, there are viruses that are able to modify the svchost file and turn it into a virus. Virus scanners are unable to fix that file because the windows operating system protects certain files from being modified (viruses can modify the file because they shutdown windows file protection while it modifies the file). Virus scanners can't shutdown WFP because of some unknown reason.
 
Shoulda' thought of this sooner.

Peeked into the innards and saw five separate listings of svchost.exe running.

I am 99.999% certain my machine is free from hostile coding.

Nothing is trying to "phone home" and have used various programs that target specific threats such as keyloggers along with the general catch other threats such as trojans, worms, viri and a host of other nogoodnik stuff. Also keep the Active X and active scripting turned off except for specific safe Web sites.

Thus, svchost.exe, as the chap up there declares, is assuredly a normal part of thine O/S.
 
svchost.exe is used by Windows to access calls in *.dll files. Svchost is run when Windows needs to access a DLL.
 
Status
Not open for further replies.
Back
Top Bottom