This link has been bookmarked by 211 people . It was first bookmarked on 25 Jan 2008, by Marc Derome.
-
01 May 12
-
23 Mar 12
-
14 Feb 12
-
17 Jan 12
-
23 Oct 11
-
25 Mar 11
-
16 Feb 11
-
05 Feb 11
-
30 Nov 10
-
26 Oct 10
-
What is svchost.exe And Why Is It Running?
<!-- google_ad_section_start -->You are no doubt reading this article because you are wondering why on earth there are nearly a dozen processes running with the name svchost.exe. You can’t kill them, and you don’t remember starting them… so what are they?
This article is part of our series explaining various processes found in Task Manager, including: jusched.exe, dwm.exe, ctfmon.exe, wmpnetwk.exe, wmpnscfg.exe, mDNSResponder.exe, conhost.exe, rundll32.exe, Dpupdchk.exe, and Adobe_Updater.exe.
Do you know what those services are? Better start reading!
-
So What Is It?
According to Microsoft: “svchost.exe is a generic host process name for services that run from dynamic-link libraries”. Could we have that in english please?
Some time ago, Microsoft started moving all of the functionality from internal Windows services into .dll files instead of .exe files. From a programming perspective this makes more sense for reusability… but the problem is that you can’t launch a .dll file directly from Windows, it has to be loaded up from a running executable (.exe). Thus the svchost.exe process was born.
-
Why Are There So Many svchost.exes Running?
If you’ve ever taken a look at the Services section in control panel you might notice that there are a Lot of services required by Windows. If every single service ran under a single svchost.exe instance, a failure in one might bring down all of Windows… so they are separated out.
Those services are organized into logical groups, and then a single svchost.exe instance is created for each group. For instance, one svchost.exe instance runs the 3 services related to the firewall. Another svchost.exe instance might run all the services related to the user interface, and so on.
So What Can I Do About It?
You can trim down unneeded services by disabling or stopping the services that don’t absolutely need to be running. Additionally, if you are noticing very heavy CPU usage on a single svchost.exe instance you can restart the services running under that instance.
The biggest problem is identifying what services are being run on a particular svchost.exe instance… we’ll cover that below.
If you are curious what we’re talking about, just open up Task Manager and check the “Show processes from all users” box:
-
Checking From the Command Line (Vista or XP Pro)
If you want to see what services are being hosted by a particular svchost.exe instance, you can use the tasklist command from the command prompt in order to see the list of services.
-
tasklist /SVC
The problem with using the command line method is that you don’t necessarily know what these cryptic names refer to.
-
Checking in Task Manager in Vista
You can right-click on a particular svchost.exe process, and then choose the “Go to Service” option.
-
This will flip over to the Services tab, where the services running under that svchost.exe process will be selected:
The great thing about doing it this way is that you can see the real name under the Description column, so you can choose to disable the service if you don’t want it running.
-
Using Process Explorer in Vista or XP
You can use the excellent Process Explorer utility from Microsoft/Sysinternals to see what services are running as a part of a svchost.exe process.
Hovering your mouse over one of the processes will show you a popup list of all the services:
Or you can double-click on a svchost.exe instance and select the Services tab, where you can choose to stop one of the services if you choose.
-
Disabling Services
Open up Services from the administrative tools section of Control Panel, or type services.msc into the start menu search or run box.
Find the service in the list that you’d like to disable, and either double-click on it or right-click and choose Properties.
-
Change the Startup Type to Disabled, and then click the Stop button to immediately stop it.
You could also use the command prompt to disable the service if you choose. In this command “trkwks” is the Service name from the above dialog, but if you go back to the tasklist command at the beginning of this article you’ll notice you can find it there as well.
sc config trkwks start= disabled
Hopefully this helps somebody!
-
-
21 Oct 10
Sachin Sharmasvchost.exe
-
30 Sep 10
-
15 Aug 10
-
“svchost.exe is a generic host process name for services that run from dynamic-link libraries”.
-
Some time ago, Microsoft started moving all of the functionality from internal Windows services into .dll files instead of .exe files. From a programming perspective this makes more sense for reusability… but the problem is that you can’t launch a .dll file directly from Windows, it has to be loaded up from a running executable (.exe). Thus the svchost.exe process was born.
-
If you want to see what services are being hosted by a particular svchost.exe instance, you can use the tasklist command from the command prompt in order to see the list of services.
-
Using Process Explorer in Vista or XP
-
-
21 Jul 10
Edmond Lauparticular svchost.exe instance, you can use the tasklist command from the command p
-
01 May 10
-
18 Mar 10
-
26 Feb 10
-
25 Feb 10
yuval yehiamou can use the excellent Process Explorer utility from Microsoft/Sysinternals to see what services are running as a part of a svchost.exe process.
Hovering your mouse over one of the processes will show you a popup list of all the services: -
26 Jan 10
-
21 Jan 10
-
01 Nov 09
-
14 Oct 09
-
29 Jul 09
-
03 Jun 09
-
23 May 09
-
25 Apr 09
-
11 Apr 09
-
02 Apr 09
-
25 Mar 09
-
09 Mar 09
-
02 Mar 09
-
12 Feb 09
-
07 Feb 09
-
06 Jan 09
-
18 Dec 08
-
02 Nov 08
-
30 Oct 08
-
16 Oct 08
-
13 Oct 08
-
Karan SachdevComputer Help from your Friendly How-To Geek
office-box Bookmarks_Menu windows svchost howto tips computer software geek for:tarunrs
-
12 Oct 08
-
18 Sep 08
-
26 Aug 08
-
17 Aug 08
-
02 Aug 08
-
03 Jul 08
-
22 Jun 08
VrtWhat is svchost.exe And Why Is It Running?
-
18 Jun 08
-
20 May 08
-
11 May 08
-
18 Apr 08
-
25 Mar 08
-
22 Mar 08
-
11 Mar 08
-
02 Mar 08
-
14 Feb 08
-
03 Feb 08
-
31 Jan 08
-
30 Jan 08
-
29 Jan 08
-
28 Jan 08
-
27 Jan 08
-
26 Jan 08
-
25 Jan 08
-
Michael LastnameAn interesting method to get rid of svchost.exe's I don't want messing up my computer.
Would you like to comment?
Join Diigo for a free account, or sign in if you are already a member.