View Full Version : svchost....why so many?

02-22-2006, 10:06 PM
I have two svchost programs running under user name "SYSTEM"

two svchost under user name "NETWORK SERVICE"

and one under user name "LOCAL SERVICE"

with a combined memory usage of around 50 k.

is something wrong here???

thanks to any posts :)

02-22-2006, 10:36 PM
No many programs use svchost to work. Here is some more detailed info.

Service Host Generic Host Process for Win32 Services. The full path to this file should be shown as C:\WinNT\System32\Svchost.exe or C:\Windows\System32\Svchost.exe. Windows 2000/XP/2003 only. SVCHOST is a generic process which acts as a host for processes that run from DLLs rather than EXEs. At startup SVCHOST checks the Services portion of the Registry to construct a list of DLL-based services that it needs to load, and then loads them. There can be many instances of SVCHOST running, as there will be one instance of SVCHOST for every DLL-based service or grouping of services (the grouping of services is determined by the programmers who wrote the services in question). Under Windows XP Professional and Windows 2003 you can find out what DLL-based services SVCHOST is running by typing Tasklist /SVC at a Command/MS‑DOS Prompt (this command is not available in Windows XP Home), while under Windows 2000 you need to use the TLIST s command from a Command Prompt (MS-DOS Prompt) (depending on how Windows 2000 was installed you may need to download TLIST from the Microsoft website or install it from one of the miscellaneous folders on the Windows 2000 CD).

02-22-2006, 11:02 PM
I shouldn't worry about it. Most computers have two or more instances of svchost.exe running. You should only worry when svchost is using 90% > CPU usage (at all times) or if there is a file called "svchost.exe" residing outside C:\Windows\system32.
The reason I say that is there are viruses around which have processes named svchost.exe which is done to disguise them as the legitimate system process.

02-24-2006, 09:04 AM
are u serious... check this out
****Screeny.**** (http://ccc.domaindlx.com/baleric/untitled.JPG)
i wonder if what u saying is true cause there is so many .exe :confused:

02-24-2006, 09:49 AM
that's perfectly normal. I currently have 6 instances of svchost.exe running on my laptop and it's normal.

What I'm on about is processes called svchost.exe residing outside \windows\system32. Anything of thsi description would almost certainly be crapware.

hmm, what happened there?

02-24-2006, 02:05 PM
If you are worried about those svchost processes then install this freeware program http://www.sysinternals.com/Utilities/ProcessExplorer.html and it will let you look at every process and you can see what programs are using each of the svchost processes.