Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
hi, pls tell me what is svchost.exe..is it recommended to remove this from the pc..? if yes..how? is there any way to know what is the application of all the windows task manager's "image name" under processes tab?
pls help me..

SVCHOST.EXE is an integral part of your system - please DO NOT attempt to delete it.
Here is a write-up from http://answersthatwork.com/
Service Host – Generic Host Process for Win32 Services. Windows 2000/XP/2003 only. SVCHOST is a generic process which acts as a host for processes that run from DLLs rather than EXEs. At startup SVCHOST checks the Services portion of the Registry to construct a list of DLL-based services that it needs to load, and then loads them. There can be many instances of SVCHOST running, as there will be one instance of SVCHOST for every DLL-based service or grouping of services (the grouping of services is determined by the programmers who wrote the services in question). Under Windows XP Professional and Windows 2003 you can find out what DLL-based services SVCHOST is running by typing Tasklist /SVC at a Command/MS-DOS Prompt (this command is not available in Windows XP Home), while under Windows 2000 you need to use the TLIST –s command from a Command Prompt (MS-DOS Prompt).
Recommendation :
An integral part of the operating system, leave alone – multiple instances of SVCHOST is a normal occurrence. If you experience SVCHOST errors, the problem is most likely not with SVCHOST but with the DLLs it is hosting***
Goods Luck
V...

Titly,
Valerie is corect in that it's a necessary part of the system but my hunch is that the reason you want to get rid of it is that you've been told to delete this because of problems with your system but those problems are related to the MSBlast virus. Go to "windowsupdate.microsoft.com" and run your updates and that should solve the problem you're having with SVCHost.exe. If you're system keeps shutting down and you can't stay up long enough to do the full updates see if you can stay up long enough to get the MSBlast fix. If not, get a friend to download it and run that first and then finish your updates. Hope i guessed right.
ciao,
wired

As said above...looks like you figure you ned to remove it because it is infected with something....there are several trojans/worms etc that run under that process but usually load up from somewhere other than the system32 folder...Svchost.exe is supposed to be located in the system32 folder only.
What is the nature of the problem you are having...if it's a virus..what is the name of it?

Note also problems with the svchos1.exe worm - if it is in task manager IT SHOULD NOT BE THERE. The '1' replaces 't' to try and camouflage it.
Boot to Safe Mode (press F8 on startup)
Go to your windows/system32 folder, delete the (two) related svchos1 files (*.poly and *.exe)
Go Start > Run > type Regedit
Find the two references in HKEY_Local_Machine (Using the search should work)
Delete them - they are malicious.
Reboot.

I am not interested in removing svchost.exe, but would like to know how to find out what DLL-based services it is running. I have home version of xp and cannot run the tasklist command.
I have a hard drive activity light that fliskers about every second. I am not sure the drive is actually doing anything.
I am trying to track down what is causing the activity. I have used the task manager to end every program that I can. There are 2 svchost.exe that will pop back up a short time after ending them.
I am wondering whether nprotect.exe and navapsvc.exe, that I cannot end, might be involved.
Thanks.

A trojan.adclicker virus was detected in the file svhost.exe.
According to the replies on this forum , one should not delete the file svhost.exe but on the symantec website it says that one should promptly delete the files in which the virus was detected.
I have norton anitvirus - it detected the virus , repaired the file 'svhost.exe' and placed a backup of the file in quarantine.
Please let me know how to make sure that my system is free of the virus.

I have 5 examples of svchost in my processes under windows task manager. 3 have the user name, system. 1 says network service, the other says local service. All have different amounts of memory usage.
Virus chiecking doens't bring anything up, it just doesn't seem right to have this so many times.
Should I be worried?

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |