SVCHOST.exe

[dave]

In Windows Task Manager under Processes I have four entries
SVCHOST.exe Local Service 3,100K
SVCHOST.exe Network Service 1,900K
SVCHOST.exe 16,160K
SVCHOST.exe 2,720K

What are these and can I safely disable them?
Any help and advice would be greatly appreciated.

Dave

 

[Ramesh [MVP]]

Dave,

Description of Svchost.exe in Windows XP:
http://www.mvps.org/sramesh2k/svchost.htm

--
Ramesh - Microsoft MVP
http://www.mvps.org/sramesh2k
-----------------------------------------



In Windows Task Manager under Processes I have four entries
SVCHOST.exe Local Service 3,100K
SVCHOST.exe Network Service 1,900K
SVCHOST.exe 16,160K
SVCHOST.exe 2,720K

What are these and can I safely disable them?
Any help and advice would be greatly appreciated.

Dave

 

[Rick \Nutcase\ Rogers]

Hi Dave,

Read the article Ramish posted. I would only be concerned if one of those
svchost.exe files was found under C:\Windows\system32\WINS - that would be a
virus, the copy found in the system32 folder is normal. Multiple instances
of svchost in Task Manager is normal as well.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone

 

[David H. Lipman]

You have infected copies running !
Please go to McAfee (http://www.mcafee.com/myapps/mfs/default.asp) and/or Trend
(http://housecall.antivirus.com ) and perform an online scan of your platform then report
back your results.

Dave L.



| In Windows Task Manager under Processes I have four entries
| SVCHOST.exe Local Service 3,100K
| SVCHOST.exe Network Service 1,900K
| SVCHOST.exe 16,160K
| SVCHOST.exe 2,720K
|
| What are these and can I safely disable them?
| Any help and advice would be greatly appreciated.
|
| Dave

 

[Gummo]

I've got these entries also and neither on-line checks with Symantec and
McAfee nor with AVG has turned anything up.

 

[Cerridwen]

You have infected copies running !
Please go to McAfee (http://www.mcafee.com/myapps/mfs/default.asp)
and/or Trend (http://housecall.antivirus.com ) and perform an online
scan of your platform then report back your results.

Dave L.

Stop scaremongering! How in Hades do you know?! Read Rick's post. It's only
a virus file if it's in a specific folder. It is perfectly normal to have
more than one instance running - I have three. Now, get your facts right
before posting!

 

[David H. Lipman]

It is if it is ONE particular infector located in the indicated folder. However,
SVCHOST.EXE is the target of numerous viruses, Trojans, worms, and parasites. There are
also *many* variations that haves names similar to SVCHOST. All too often I see that it is
misspelled and the person is indeed infected.

There is NOTHING wrong with having multiple instances of the executable running, the sizes
look suspicious.

Dave



| David H. Lipman wrote:
| > You have infected copies running !
| > Please go to McAfee (http://www.mcafee.com/myapps/mfs/default.asp)
| > and/or Trend (http://housecall.antivirus.com ) and perform an online
| > scan of your platform then report back your results.
| >
| > Dave L.
|
| Stop scaremongering! How in Hades do you know?! Read Rick's post. It's only
| a virus file if it's in a specific folder. It is perfectly normal to have
| more than one instance running - I have three. Now, get your facts right
| before posting!
|
|

 

[Alex Nichol]

In Windows Task Manager under Processes I have four entries
SVCHOST.exe Local Service 3,100K
SVCHOST.exe Network Service 1,900K
SVCHOST.exe 16,160K
SVCHOST.exe 2,720K

What are these and can I safely disable them?

SVCHost provides the interface for the system to run a whole slew of
Services. They get started in batches as the system loads, you log on
and the net connection starts - hence the four instances, each running a
separate set. Leave them alone.