Many Svchost.exe Processes

Right now I have 5 svchost.exe proceses running? Why so many? What are they anyways?

Svhost is a services host. Each one of those is a front end for a service on your computer. For example, if you use visual styles one of those is the .exe that skins your titlebars and loads up uxtheme.dll to skin the dialog areas. Another one is for networking purposes, etc.

#98558

they're different services.

read this to learn more about disabling some: http://www.blackviper.com/WinXP/servicecfg.htm

#98560

5 is default for Windows (as in when you just installed XP). Currently I have 10 svhosts running

#98564

Is it a way to know among the 5 svchost.exe for example which one do what?

#98567

Originally posted by AndreasV@Jan 11 2004, 05:38 PM
5 is default for Windows (as in when you just installed XP). Currently I have 10 svhosts running

Why so many? They seem to use up quite a bit of memory.

#98606

Originally posted by AndreasV@Jan 11 2004, 10:38 PM
5 is default for Windows (as in when you just installed XP). Currently I have 10 svhosts running

The one with the most get a shiny new G5 :lol:

I have 7....

Wait that means I already lost :rant:

Scott

#98609

i only have 4 of them running.

i disabled a lot of services with the guide posted earlier.

#98610

Originally posted by dreamz@Jan 11 2004, 08:08 PM
i only have 4 of them running.
i disabled a lot of services with the guide posted earlier.

Yea I did the same thing although I don't really notice a difference in start up time.

I just disabled about 2 more services.

#98611

there's one in mine that isn't listed there: ccApp.exe thats being a resource hog

Any ideas?

#98622

Originally posted by AndreasV@Jan 11 2004, 10:38 PM
5 is default for Windows (as in when you just installed XP). Currently I have 10 svhosts running

funny ive got 4. Mabie my XP is a little retarted :rolleyes: SVChosts used to scre me too, i was like omg do i have a virus, but there actualy something.

#98645

mesh, you might also want to take a look at msconfig and see what you can disable in the startup tab. also try out bootvis.

keith, are you running norton av? ccapp.exe is some realtime app: http://www.liutilities.com/products/wintas...slibrary/ccapp/

#98674

yea thats it, thx dreamz. so its true that norton is a resource hog >.

#99018

Whoops :shy: , number 5 seems to be some WinXP pro admin tool or something, it doesn't show up at my sisters XP install

#99034

Originally posted by Keith@Jan 12 2004, 03:17 PM
yea thats it, thx dreamz. so its true that norton is a resource hog >.<

norton isn't necessarily a resource hog. i'm running nav corporate (what my school offers) with the realtime scan and i don't notice any slowdown at all.

as for the 5th svchost, i'm on pro and i'm an admin, but i only have 4, but there are definitely unnecessary services you can (and probably should) disable.

#99035

To determine what service each svchost relates to download process explorer here, then run it and right click on svchost.exe select properties, and on command line you should see something like this:

C:\WINDOWS\System32\svchost.exe -k iissvcs

the last part means that it's for the IIS service in this example. That should get ya started.

#99069

I have 3 :6

#99425

Base default for Windows XP Pro is 4 SVCHOST processes.

2 should be running as SYSTEM

1 is running as LOCAL SERVICE

1 is running as NETWORK SERVICE.

Most common use of SVCHOST.EXE

First... the BIG one.

"C:\WINDOWS\System32\svchost.exe -k netsvcs"

This runs the following services, they will show up in Task manager anywhere from 1 to 10 processes. Default is 2, running as SYSTEM.

These services should be running for Windows to function normaly.

They may not be required, but are very common.

BITS, COM +, Cryptographic Services, DHCP Client, Dist. Link Tracking Client, Help and Support, Network Connections, NLA, Secondary Logon, Server, Shell Hardware Detection, System Event Notification, System Restore Service, Terminal Services, Themes, Upload Manager, Windows Audio, Windows Management Instrumentation and Workstation.

These are optional and can be either disabled or set to manual.

Check for dependancies before disabling any service.

Application Management, Automatic Updates, Computer Browser, Error Reporting Service, Fast User Switching Compatibility, Human Interface Device Access, Infrared Monitor, Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS), IPv6 Internet Connection Firewall, Logical Disk Manager, Messenger, Portable Media Serial Number Service, Remote Access Auto Connection Manager,

Remote Access Connection Manager, Removable Storage, Routing and Remote Access, Task Scheduler, Telephony, WMI, Windows Time and Wireless Zero Configuration.

Here are the remaining 3 uses of SVCHOST.EXE.

"C:\WINDOWS\System32\svchost.exe -k NetworkService"

Runs DNS Client

"C:\WINDOWS\system32\svchost -k rpcss"

RPC Service

"C:\WINDOWS\System32\svchost.exe -k LocalService"

TCP/IP NetBIOS Helper, Alerter, Remote Registry, Universal Plug and Play Device Host, WebClient,

Here is another, but it is not required to be running.

"C:\WINDOWS\System32\svchost.exe -k imgsvc"

Windows Image Acquisition (WIA)

FYI:

SERVICES.EXE is for the Event Log Service and Plug and Play.

So don't go turning it off unless you really need to.

This is incorrect... "C:\WINDOWS\System32\svchost.exe -k iissvcs"

This is the correct setting for these services.

"C:\WINDOWS\System32\inetsrv\inetinfo.exe"

This applies to both IIS Admin and World Wide Web Publishing.

#99435

btw.

Sometimes the virus Ms Blaster trojans as svchost.exe. If you get an error message saying that svchost.exe has executed an illegal operation (or something), you should install blaster-patch