Function of svchost.exe in the system Process

Svchost.exe exists in % windir % \ system32 \ wins.

The Svchost.exe file is a common host process name for services running from the dynamic Connection Library. The Svhost.exe file is located in the % systemroot % \ system32 folder of the system. At the startup time, svchost.exe checks the location in the Registry to build the list of services to be loaded. This will allow multiple svchost.exe to run at the same time. Each session of svchost.execontains a set of services, so that the unique service depends on how and where svchost.exe is started. This makes it easier to control and locate errors.
The Svchost.exe group is identified by the following registry values. HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows NT \ CurrentVersion \ Svchost each value under this key represents an independent Svchost group, and when you are watching the active process, it is shown as a separate example. Each key value is of the REG_MULTI_SZ type and includes services running in the Svchost group. Each Svchost group contains one or more service names selected from the registry value. The service parameter value contains a ServiceDLL value.
HKEY_LOCAL_MACHINE \ System \ CurrentControlSet \ Services \ Service

If you suspect that svchost.exe is a virus, you can use the following methods to verify whether it is a virus:

1. You can go to the wins directory to find the excess
2. You can search for svchost.exe in the windows folder to see how many files should be 1)
3. Check tlist-s
4. You can also download a browser tool for viewing processes with path names.