svchost.exe

Windows Process Description:
The process svchost.exe is related to services that run dynamic link libraries. The svchost.exe process is a generic host process for services that execute DLLs within modern versions of the MS Windows operating system.

The process svchost.exe is described as Generic Host Process for Win 32 Services. It has a known file size of 14,336 bytes and has a product version of 5.1.2600.2180. This process has no visible window and is a trusted file from Microsoft. The application is also capable of listening or sending data on open ports to LAN or Internet.

The file svchost.exe is a valid Windows system file that should not be deleted or altered in any way unless there are concerns that it is not the legitimate svchost.exe process.

The svchost.exe process is included in the Windows boot up processes by default. It is a very important application for the Windows operating system because it is the process that checks the services part of the registry to construct a list of services that it must load. Several svchost.exe processes can be executed at the same time. Each svchost.exe process contains a group of services, thus separate services can run at the same time, depending on where and how the process is innitialized. The grouping of the services allows better management and easier debugging, but can also cause difficulty for users that wishes to verify the legitimacy of the svchost.exe process.

Since the svchost.exe process is commonly used by the system, it has been frequently disguised as malware by some applications to hide its occurrence from the user. Though detection of the fake svchost.exe process requires a lot more work than other processes, it can be reduced by spotting abnormal memory usage and matching reported PIDs with previously known svchost.exe file instances.

Microsoft Corporation developed the Generic Host Process for Win32 as a part of the Microsoft Windows Operating System.

Author:
Microsoft Corporation

Author URL:
http:// www.microsoft.com

Part Of:
Microsoft Windows Operating System

Memory Usage:
Low. The svchost.exe uses 14336 bytes worth of RAM resources.

System Process:
Yes

Application:
No

Background Process:
Yes

Uses Network:
Yes

Uses Internet:
Yes

Hardware Related:
No

Common Path:
C:\WINDOWS\system32\