Svchost is not working. Host process for Windows services. What is it: basic concepts

Today we’ll talk about the svchost.exe process - what is it, why is it needed, and why can there be so many of them in the task manager?

Many users, when they see a lot of such processes in their system, they think that this is definitely a virus in their system, especially when svchost.exe loads the processor, loads Windows... but if svchost.exe loads the system, then this may be a completely normal phenomenon ! Why? If, for example, you don’t have much powerful computer, then after Windows installations 7 It is possible that you have encountered such a glitch - so you installed it and after a while (provided that the Internet is connected) svchost process The .exe starts loading the system. Why? This is related to the first update - as a rule, there are many of these updates and they all need to be installed! I don’t know how it is in Windows 8, but in Windows 10 this problem seems to have already been solved!

It also happens that svchost.exe begins to load Windows so much that the computer itself already takes action - turns on the fans at full blast!

So, now about what svchost.exe is? This system module Generic Host Process for Win32 Services, and most importantly, this process is very important for the system! Under no circumstances should you turn it off yourself, that is, don’t dare end it in the task manager! It is the main part in the interaction of programs, services with dll libraries (in which the functions are to work), and this is only one of its main tasks.

There can really be a lot of svchost.exe processes, up to several dozen. By the way, I experimented with services in Windows XP and came to the conclusion that the fewer of them running, the fewer svchost.exe processes, I think the same in newer versions of Windows. But I don’t recommend disabling services, as disabling some can cause serious glitches. By the way, the commander-in-chief of svchost.exe is services.exe, which is what launches it.

For example, how many of them I have, not so many, but still... I haven’t changed anything in Windows 10 itself, that is, only some settings, and it’s already updated - it doesn’t load anything, the processes hang and that’s it:

Is svchost.exe a virus? how to delete? Yes, indeed, under this process there can actually be a virus, and so that you cannot distinguish it from a normal one, the virus is launched from a different folder. Thus, in the task manager you have several processes and one of them can be launched from the left folder... But remember, the svchost.exe process itself is not a virus and plays very well important role on Windows!

So, here are the folders in which svchost.exe has the right to live, that is, these are its native places:

C:\Windows\system32 (probably the most important folder after Windows)
C:\WINDOWS\ServicePackFiles\i386 (stored here installation files Windows)
C:\WINDOWS\Prefetch (this folder usually stores Prefetch technology files - preloading data to speed up the computer as a whole, a very necessary thing)
C:\WINDOWS\WinSxS\*folder name with long name, which has svchost* in its name (it stores all old updates and files of outdated components, just in case)

Here's an example - in my WinSxS folder there is another folder with long name, and inside there is svchost.exe itself and it’s definitely not a virus:

If you found svchost.exe in a completely different folder, then this is already bad, since it could easily be a virus! And one more thing - open the dispatcher and look, what exactly is the name of the process? It must be original, for example, there may be such special names so that you do not notice the difference: svch0st.exe, svchos1.exe, svcchost.exe, svchost32.exe b and other options, there are a lot of them, there is no point in listing them. But the most difficult option is when it’s just svchost.exe - here you already need to check the location of the file (right-click on the process in the manager and you can select the location there).

For process analysis I recommend using free utility Mark Russinovich - Process Explorer, there you can view a lot about the process itself and it is made conveniently. Moreover, it is approved by Microsoft itself. In the settings, you can enable the replacement of the built-in Windows Manager tasks, to do this select Options > Replace Task Manager. You can download it from the official:

Although it is a little overloaded with functions, in my opinion, it remains the best replacement for the built-in dispatcher.

What is another sign that svchost.exe is a virus? Very simply, this process never seems to run on your behalf - it always happens from system accounts, namely: SYSTEM, LOCAL SERVICE or NETWORK SERVICE. This has always been the case, but in Windows 10 I noticed that I was already running as a user... maybe something has already changed? I looked at the location of the process and calmed down that everything was fine, it was a system process

Also look at the original process (the one in the system32 folder in Windows 10), here it has the following description:

Any suspicions? Then enter svchost.exe in a search engine, which version should be and yours Windows version, and see if it matches. I’m writing this because if you know what version or build you have, the data may be different.

What to do when svchost.exe loads the system? First, try disabling the Center service Windows updates, if the problem is solved, then this means that the problem is with this service. What I mean is that it’s better to turn it on and wait until svchost.exe stops loading the computer. This will happen when Windows has completely downloaded all the updates and installed them, but this is much better than disabling the service. By the way, you can quickly launch a window with a list of services: open the Run window, and this is Win + R and write the command services.msc there:

After that, enter and this window will appear:

Well, to disable it, find the service, double-click on it and in the window select Startup Type - Disabled, and then click on Stop so that the service stops working.

You should not try to complete this process, since in this case you will have at least the internet will disappear, and maximum - a forced reboot is possible. By the way, termination of the lsass.exe process also leads to forced reboot(if I'm not mistaken, in a minute).

If in the end you still have a load left, then move on. We check the computer with this utility - I explained everything there in the article, in general everything is simple and you can definitely handle it, it can find a virus or even several on you, it is a specialist in advertising viruses!

Second also powerful tool- This ESET Online Scanner! He is already a master of all viruses! Well, maybe someone will disagree with me, he just helped me more than once. Follow this link and click Launch ESET Online Scanner:

Then a small window will open where you need to enter your email, you can enter any:

And then you will be prompted to run the scanner:

They will offer to download ESET Smart Installer, which will launch the scanner on your computer:

About Internet Explorer that’s right - if you run the scanner there, then it will actually work right in the browser, which is very convenient. Internet Explorer itself supports this technology.

The scan may take some time, I advise you to set it up for a deep scan (together with scanning archives, I do this myself) - it will of course take longer, but the cleaning of viruses will be deeper, well, this is just my advice. And if the scanner finds viruses, then they can be removed delete after scanning, that is, you will decide what to delete and what not, in case the scanner mistakes a normal file for a virus.

Interestingly, for some users the svchost.exe process took up all 12 GB of RAM out of the available 16 GB, what a horror!

You can also try deleting the Prefetch folder from C:\Windows, temporary files for accelerated launch programs, they are not important for the system, but you don’t need to delete them all the time! Most often svchost.exe loads Windows processor 7 after installation on your computer and connection to the Internet! This is the norm!

Well, it seems like I wrote everything, although I probably missed something, in general, if there is anything, leave a comment! And do everything carefully on your computer so that there are no glitches later - here best friend This is System Restore, so create control points and we will make you happy! Good luck

09.01.2016

Description: svchost.exe is common name main process associated with system Windows functions, which are launched from dynamically linked libraries. When launched, svchost.exe checks the registry of functions to load and run them. It is normal for them to have several of them running at the same time. Each of them represents a group of basic functions that run on a PC. Not to be confused with scvhost.exe.

Detailed analysis: svchost.exe often causes problems and is essential for Windows. Svchost.exe is located in the C:\Windows\System32 folder. The following file sizes are known for Windows 10/8/7/XP 20,992 bytes (49% of all cases), 14,336 bytes and .
This is a Windows file. The application is not visible to users. This is a file signed by Microsoft. That's why technical rating reliability 7% danger.

How to recognize suspicious processes?

If svchost.exe is located in a subfolder of "C:\Users\USERNAME", then the reliability rating 80% danger. File size 3,580,520 bytes (15% of all cases), 3,772,520 bytes and . This is not a Windows system file. There is no information about the creator of the file. The process has no visible window. The file has a digital signature. Svchost.exe is capable of monitoring applications.
If svchost.exe is located in the C:\Windows folder, then the reliability rating 54% danger. File size 20,480 bytes (32% of all cases), 1,605,120 bytes and . This is not a Windows file. The application is not visible to users. Located in Windows folder, but this is not a file Windows kernels. There is no information about the creator of the file. Svchost.exe is capable of monitoring applications and recording input.
If svchost.exe is located in a subfolder of C:\Windows, then the reliability rating 60% danger. File size 20,992 bytes (15% of all cases), 1,563,136 bytes and .
If svchost.exe is located in a subfolder of "C:\Program Files", then the reliability rating 66% danger. File size 8,056,832 bytes (5% of all cases), 3,595,880 bytes and .
If svchost.exe is located in a subfolder of C:\Windows\System32, then the reliability rating 60% danger. File size 2,030,080 bytes (6% of all cases), 1,169,224 bytes and .
If svchost.exe is located in the Windows folder for storing temporary files, then the reliability rating 67% danger. File size 409,088 bytes (22% of all cases), 4,582,912 bytes and .
If svchost.exe is located in a subfolder of the C:\ drive, then the reliability rating 54% danger. File size 32.768 bytes (25% of all cases), 752.128 bytes and .
If svchost.exe is located in the C:\Windows\System32\drivers folder, then the reliability rating 81% danger. File size 194,560 bytes (16% of all cases), 237,568 bytes and .
If svchost.exe is located in Windows subfolders for storing temporary files, then the reliability rating 71% danger. File size 704,606 bytes (16% of all cases), 645,120 bytes and .
If svchost.exe is located in a subfolder of "C:\Program Files\Common Files", then the reliability rating 52% danger. File size is 91,648 bytes (75% of all cases) or 1,012,224 bytes.
If svchost.exe is located in a subfolder of C:\Windows\System32\drivers, then the reliability rating 63% danger. File size is 897.215 bytes (50% of all cases) or 26.624 bytes.
If svchost.exe is located in the folder "C:\Users\USERNAME", then the reliability rating 64% danger. File size 145,408 bytes.
If svchost.exe is located in the "My Files" subfolders, then the reliability rating 74% danger. File size 674,304 bytes.
If svchost.exe is located in the "C:\Program Files" folder, then the reliability rating 64% danger. File size 90,112 bytes.

Important: Some malware disguise themselves as svchost.exe, especially if they are located Not in the C:\Windows\System32 directory. Therefore, you should check the svchost.exe file on your PC to see if it is a threat. We recommend checking the security of your computer.

Total: Average rating of site users about the file svchost.exe: - based on 89 votes with 84 reviews.

320 users asked about this file. 27 users did not give a rating (“I don’t know”). 32 users rated it as not dangerous. 17 users rated it as not dangerous. 6 users rated it as neutral. 21 users rated it as dangerous. 13 users rated it as dangerous.

A number of users may encounter a situation where their computer begins to crash and slow down, and the culprit is the svchost.exe process, which often consumes up to 100% of the CPU power. In this material I will try to help these users and tell you what to do in a situation where the Host process for Windows Services loads memory and processor, what are the reasons for this phenomenon and what to do to correct this situation.

The name "Svchost" is short for " service host" ("main process") and usually denotes a system process that simultaneously serves a number of important operating services Windows systems. The average computer can have up to 15 processes running, and each process can be responsible for running one or more Windows OS services.

Using one svchost process to service multiple services makes sense and saves resources. operating system and speed up its work. Since the Windows NT line, the svchost process is a mandatory attribute of the Windows OS family and is present in every OS starting with Windows 2000. Next, we will look at how to fix the situation when the Host process for Windows services loads the computer.

If you launch Task Manager, go to the "Processes" tab, and click on the "Show processes of all users" button, and then click on the "Image name" button, you will see several svchost.exe processes, usually running as the user "SYSTEM" ", "LOCAL SERVICE" and "NETWORK SERVICE". If you have the svchost process running on your behalf or on behalf of other non-system users, then this may be a sign of the presence of various virus programs, which need to be disposed of immediately.

The process file itself that is launched is usually located at Windows\System32 (32-bit OS) or Windows\SysWOW64 (64-bit OS).

The host process for Windows services is consuming memory and CPU - causes of dysfunction

So, what are the reasons why the host process for Windows services is using up memory and CPU? I would note the following:

Random operating system crash;
Damage to the Windows OS registry;
Computer hardware problems (clogging the inside of the PC with dust, memory problems, and so on);
Problems with installing updates in this operating system;
Operation of virus programs;
Inflated log file size.

Once we have identified the reasons why the host process is loading the system, we move on to the list of actions to solve the problem.

How to fix the "svchost is loading the system" problem

So, how do you get rid of the problem where the host process is loading Windows? I recommend doing the following:

Install everything necessary updates for your OS. If there is a possibility that the system installs necessary updates, then just wait until the end of the installation process;
If after a few hours nothing has changed, then restart your computer, if the problem is random, then it will disappear;
Try to shut down the problematic svchost.exe process yourself. Launch the task manager, go to the “Processes” tab, right-click on the problematic (costly) process and select “End process tree”;
Remove all content Prefetch folders at Windows\Prefetch. Various data about launched files are stored there, including those that have not been running for a long time. needed by the user, and cleaning this folder can help with the issue when the Host process for Windows services is using memory and CPU. After cleaning the specified directory, try again to terminate the problematic process as described above;
Disable checking for operating system updates (). Go to Control Panel, select System and Security, then go to Center Windows updates", click on "Settings on the left" and select "Don't check for updates";
Disable Windows Update service. Click on the “Start” button, type services.msc in the search bar, find “Windows Update” in the list of services, double-click on it and select the startup type “Disabled”;
Clear the system log file. Click Start, type eventvwr.msc in the search bar and press enter. Open the “Windows Logs” tab, right-click on “Application”, and select “Clear Log” from the menu that appears. Do the same for the “Security”, “Installation”, “System”, “Forwarded Events” tabs;
Use programs to clean and restore the registry (CCleaner, RegCleaner and a number of other analogues);
Check your system for malware (tools such as Dr. Web CureIt!, Trojan Remover, Malware Anti-Malware etc.), trace the location of the svchost.exe file (where it should be located, I already mentioned above) and its correct name(should only be “svchost.exe” without modifications);
Perform a system rollback to a previous restore point. Click “Start”, type rstrui in the search bar, and roll back the system to its stable version;
Take your computer to service center to clean it from dust and check the functionality of its components (memory, power supply, video card, etc.), or if you have sufficient qualifications, perform these procedures yourself.

Video solution

Above, I discussed the situation in which the host process for Windows services loads the processor and memory, and also gave a recipe for solving this problem. Excessive CPU usage on your computer can have a whole range of reasons, from the banal installation of updates for your system to various hardware problems, including problems with the memory, power supply and other elements of your computer. I recommend following the entire set of tips I have outlined; one of them will definitely be the most effective for you and will help solve the problem with the host process on your PC.

Are you tired of so many error messages popping up? svchost services.exe and annoying notifications about interruption of other services due to an error in the svchost.exe application.
You have stopped the svchost.exe application error from appearing by ending all svchost services. After this, your system does not respond.
You saw some strange svchost application processes in the list of processes and disabled them completely. The Windows system stopped working in this mode.
You were surprised by the appearance of a system message: “Generic Host Process for Win32 Services - an error has been detected. The application will be closed. We apologize for the inconvenience." And it seems to you that something is wrong.
Error message "Svchost.exe - Application Error: The instruction at address "0x745f2780" accessed memory at address "0x00000000". Memory cannot be "read"" interferes with your normal operation on your computer until you restart your PC.

Congratulations! You are on the right track in the fight against the svchost.exe application error! You can use the instructions below to resolve the svchost.exe application error.

QUICK FIX for Svchost.exe application error

Make sure that there are no viruses or spyware on your computer - download an anti-virus program. Immediately after scanning for viruses and spyware you will find out that the svchost application error is not due to viruses, or svchost virus has penetrated your computer. In the first case, proceed to the second step. In the second case, relax because SpyHunter has already eliminated all malware on your computer, including the source of the svchost.exe application error.

It's even easier. Download the Svchost Error Elimination Utility and it will solve all your problems related to svchost.exe application errors.

Where does the svchost.exe application error start?

Since the application error svchost.exe prevents normal download computer and the operation of many essential services, including RPC ( Remote call procedures). Due to application error svchost.exe DLL files are unable to efficiently contain and distribute Win32 services without excessive CPU usage. Some programs stop working when the svchost.exe application error occurs, and after they stop working, the computer needs to be restarted. There are many reasons why the svchost.exe application error appears, but two of them are more common. For example, due to system damage or viral activity svchost application error appears on the computer and after that you will no longer be able to distinguish which of them running processes svchost.exe are system processes, and which of these processes are viral. In addition, corruption and errors in the svchost.exe application often cause the computer to freeze and restart.

Is there another way to get rid of the svchost.exe application error?

Yes, you can find it below.

This is no joke, the svchost.exe application error can seriously damage your operating system. Use our Svchost Troubleshooter to better protection from any types of svchost.exe application errors.

Relax! Solution guaranteed!

If our Utility does not solve your problems related to the svchost.exe application error, we will refund all costs to you.

Svchost.exe- system file and process of all modern Windows operating systems, starting with Windows 2000 and ending latest Windows 10.

Windows developers created a universal svchost process to reduce the computer's load on RAM and processor. This process used for simultaneous operation of several Windows system services.

It is not uncommon for the svchost process to load the processor and Windows memory 7, that it becomes impossible to work on a computer. In this article you will learn what may be the reasons for the svchost process to slow down and how to solve them.

Checking svchost for viruses

The first step is to make sure that the problem is caused by a real svchost file and not by a virus. The fact is that attackers very often imitate their virus with the name svchost so that the computer owner does not suspect anything suspicious. It is worth noting that the svchost.exe process in all Windows except Windows 8 and Windows 10 is launched exclusively on behalf of system users SYSTEM (system), LOCAL SERVICE And NETWORK SERVICE. So, if you see that svchost is running as a user, then this is almost certainly a virus simulating the operation of a system file.

In order to see under which user svchost is running, press the key combination ctrl+alt+del and open the task manager. Go to the “processes” tab and sort the list by CPU, that is, by load on CPU. You can also sort by image name.

As you can see in the screenshot, all svchost.exe processes are launched from system users (system, LOCAL SERVICE and NETWORK SERVICE). This means that we are not dealing with a virus and we can dig further. If the svchost process were launched under your user name, for example Dima or Alena, then you would need to clean your computer from viruses. But I will talk about this in the next article.

Reasons why svchost exe loads the processor

As was already written at the beginning of the article, the svchost.exe process served to operate several system services of the Windows 7 operating system at once. If svchost loads the Windows 7 processor or RAM to 100 percent, this means that some service is constantly calling on it file.

First, try simply restarting your computer. It is quite possible that one of your services has failed and a regular reboot may help. If after rebooting the computer the problem remains and svchost exe loads the Windows 7 processor as before, then you will have to determine which service is causing the problem.

I’ll get ahead a little and say that the text below explains the method for finding a problematic service, but as a rule, svchost loads the processor only because of some, so before following the instructions in this paragraph, first read the entire article, and only then act.

In order to determine which services svchost.exe runs on, press ctr+alt+del and open the task manager. Select the “processes” tab and sort the table by process name.

Select the svhost.exe process that consumes the most resources, right-click and click “go to services.”

You will be redirected to the “services” tab of the task manager, where the services that use the svchost.exe process for their own purposes will be highlighted.

Now you should go to the “services” menu and disable it.

If after this the load on svchost subsides, then you have found a problematic service. If the service is not critical, then set the startup type to “disable” so that the service does not start every time you turn on the computer. This will prevent you from overloading your computer’s processor and memory.

If svchost continues to load memory or the processor, then you will have to brute-force disable one service after another until the service causing the slowdown is found.

Svchost loads CPU due to Windows 7 automatic update

It is important to understand that there are critical Windows services, without which work on the computer will be impossible, and secondary ones, without which regular user The computer may well live.

The svchost process in most cases uses up the CPU or memory in Windows 7 due to the service Windows Update. To disable it, click Start - Control Panel - System and Security - Windows Update.

From the right menu select Setting parameters.

In the window that appears, instead of “install updates automatically,” select “Search for updates, but the decision to download and install is made by me.”

After this, the system will not automatically download and install all found updates, but will only notify you that updates are available and, if desired, you can download and install them. This way the loaded svchost process will not work on the service automatic update.

Also, to be sure, you can completely disable the automatic update service. To do this, go to the Start menu - Control Panel - Administrative Tools - Services. Find the Windows Update service and click “disable”, also change the startup type to “disabled”.