Svchost
Svchost.exe refers to a group of processes or services that run from DLLs. A DLL or Dynamic Link Library is an implementation of the shared library concept that can be found in various Microsoft operating systems. Dynamic Link Libraries were created in order to save your computer’s memory and storage space. Svchost.exe can be found in your computer’s %SystemRoot%\System32 folder. Each time you start up your computer, Svchost looks for the services section of your registry in order to create a specific list of processes that must be loaded. In many instances, several versions of Svchost may be running at the same time. Combining services like this at one time allows for more efficient use of your PC and fewer problems with debugging your system.
Svchost.exe can be identified by the following registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Svchost
All corresponding values found under this registry key refers to a separate Svchost group and will appear as a separate item when you are looking at all of the open processes on your computer. If you want to look at all of the processes that are running in Svchost at any given time, be sure to adhere to the following instructions:
1. Go to the Windows Taskbar and then click on Start
2. Click Run
3. In the box that says open, type “CMD” and then click on ENTER.
4. You will then type “tasklist/SVC” and hit ENTER.
Tasklist will then show a list of all the processes that are active. Svchost will show the group of active services in each process. If you want to find out more about a particular process, just type Tasklist/FI ”PID eq processID” and hit ENTER.
It is important to keep in mind that Svchost should always be located in the C:\Windows\System32 folder. If you see this file in any other folder or program, it may be a virus, worm or other type of malicious program. In most instances, bogus forms of Svchost will be registered as a backdoor vulnerability which is typically installed by malicious users attempting to steal your passwords and other personal information. Malicious versions of Svchost can also be used to monitor your online activities. This information can then be sent to third parties without your consent or knowledge.
It is important that you make sure that the Svchost process that you see on your computer is really the legitimate process offered by Microsoft and not a malicious program. The easiest way to do this is to check the directory location the program is running from. Many anti-virus and anti-spyware programs also allow you to scan your PC to make sure that all programs that are installed on your computer are legitimate. The legitimate version of Svchost should not be disabled, removed or tampered with as it will interfere with essential programs being able to be properly operated. You should also make sure that you run regular performance scans in order to make the most out of your CPU, memory and internet settings.
Get a Free Online Diagnostic Scan for your PC
