SVCHOST.exe

  • Thread starter Thread starter dave
  • Start date Start date
D

dave

In Windows Task Manager under Processes I have four entries
SVCHOST.exe Local Service 3,100K
SVCHOST.exe Network Service 1,900K
SVCHOST.exe 16,160K
SVCHOST.exe 2,720K

What are these and can I safely disable them?
Any help and advice would be greatly appreciated.

Dave
 
Dave,

Description of Svchost.exe in Windows XP:
http://www.mvps.org/sramesh2k/svchost.htm

--
Ramesh - Microsoft MVP
http://www.mvps.org/sramesh2k
-----------------------------------------



In Windows Task Manager under Processes I have four entries
SVCHOST.exe Local Service 3,100K
SVCHOST.exe Network Service 1,900K
SVCHOST.exe 16,160K
SVCHOST.exe 2,720K

What are these and can I safely disable them?
Any help and advice would be greatly appreciated.

Dave
 
Hi Dave,

Read the article Ramish posted. I would only be concerned if one of those
svchost.exe files was found under C:\Windows\system32\WINS - that would be a
virus, the copy found in the system32 folder is normal. Multiple instances
of svchost in Task Manager is normal as well.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone
 
You have infected copies running !
Please go to McAfee (http://www.mcafee.com/myapps/mfs/default.asp) and/or Trend
(http://housecall.antivirus.com ) and perform an online scan of your platform then report
back your results.

Dave L.



| In Windows Task Manager under Processes I have four entries
| SVCHOST.exe Local Service 3,100K
| SVCHOST.exe Network Service 1,900K
| SVCHOST.exe 16,160K
| SVCHOST.exe 2,720K
|
| What are these and can I safely disable them?
| Any help and advice would be greatly appreciated.
|
| Dave
 
I've got these entries also and neither on-line checks with Symantec and
McAfee nor with AVG has turned anything up.
 
David said:
You have infected copies running !
Please go to McAfee (http://www.mcafee.com/myapps/mfs/default.asp)
and/or Trend (http://housecall.antivirus.com ) and perform an online
scan of your platform then report back your results.

Dave L.
Click to expand...

Stop scaremongering! How in Hades do you know?! Read Rick's post. It's only
a virus file if it's in a specific folder. It is perfectly normal to have
more than one instance running - I have three. Now, get your facts right
before posting!
 
It is if it is ONE particular infector located in the indicated folder. However,
SVCHOST.EXE is the target of numerous viruses, Trojans, worms, and parasites. There are
also *many* variations that haves names similar to SVCHOST. All too often I see that it is
misspelled and the person is indeed infected.

There is NOTHING wrong with having multiple instances of the executable running, the sizes
look suspicious.

Dave



| David H. Lipman wrote:
| > You have infected copies running !
| > Please go to McAfee (http://www.mcafee.com/myapps/mfs/default.asp)
| > and/or Trend (http://housecall.antivirus.com ) and perform an online
| > scan of your platform then report back your results.
| >
| > Dave L.
|
| Stop scaremongering! How in Hades do you know?! Read Rick's post. It's only
| a virus file if it's in a specific folder. It is perfectly normal to have
| more than one instance running - I have three. Now, get your facts right
| before posting!
|
|
 
dave said:
In Windows Task Manager under Processes I have four entries
SVCHOST.exe Local Service 3,100K
SVCHOST.exe Network Service 1,900K
SVCHOST.exe 16,160K
SVCHOST.exe 2,720K

What are these and can I safely disable them?
Click to expand...

SVCHost provides the interface for the system to run a whole slew of
Services. They get started in batches as the system loads, you log on
and the net connection starts - hence the four instances, each running a
separate set. Leave them alone.
 
Back
Top