What is Svchost.exe? Why it's always running

Original: http://www.howtogeek.com/howto/windows-vista/what-is-svchostexe-and-why-is-it-running/

The simple translation of their own, the figure is not affixed, in fact, Svchost is easy to understand that SVC is the abbreviation of the service, host is the meaning of the host, Svchost is the host of the service parasite.

What is Svchost.exe? Why it's always running
--------------------------------------------------

There is no doubt that you read this article because you are wondering why there are many programs named Svchost running, you can't terminate them, you never run ... So, what exactly are they?

This article belongs to our explanation of the Task Manager process in a series of articles, including Jusched.exe, Dwm.exe, Ctfmon.exe, Wmpnetwk.exe, Wmpnscfg.exe, MDNSResponder.exe, Conhost.exe, Rundll32.exe, Dpupdchk.exe, and Adobe_updater.exe.

Do you know what these services are? Keep looking.

What the hell are they?
--------------------------

According to Microsoft's explanation, "Svchost is a total host process name used to run the dynamic link library," You say?

Previously, Microsoft began to move internal Windows services from EXE files to DLL files. From a procedural point of view, this will increase reuse ... But the problem is that you can't load a DLL file directly, he has to load it into an EXE executable. So the Svchost process was born.

Why are so many svchost processes running?

If you look at the Services tab, you will find that Windows will ask for a bunch of services. If every service is under a svchost, if there is an error, the entire Windows will be down ... So they were separated.

These services are divided into logically several parts, so a separate svchost process is generated for a set of services. For example, a Svchost instance runs three firewall-related services, and another Svchost service may be associated with the user interface, and so on.

So what can we do?

You can terminate or disable some services that you do not need. You can also find a svchost that consumes a lot of system resources and then restart the service.

The biggest problem is what services are running under the svchost ... We'll mention it later.

If you are still concerned about the problem, you can open Task Manager and click Open User's process:

Figure

If you use the WINDOWS8 or 10, you need to go to the Detailed tab.

To view from the command line
------------------------

If you need to see what processes are under Svchost, you can see the list of which services are available through the tasklist command.

Tasklist/svc

The problem with commands is that you don't know exactly what these mysterious names represent.

View under Task Manager
---------------------------

To view the details of the process, there are small differences under each version of Windows, you can right-click on a specific Svchost process and choose Go to service option.

Figure

This will jump to the Service tab and the service that is running behind the svchost you just selected will be selected. Win8 or 10 is a little different.

Figure

The best part of this is that you can see the details page that describes the service, so you can choose whether you want to stop the service or you don't want to run it at all.

Using Process Explorer
--------------------------

You can use the Awesome Process Explorer tool (from Microsoft Sysinternals) to see what services are running under Svchost.

Put your mouse in any process, you can pop up a box to describe each service.

Or you can double-click Svchot to select the Service tab, and you can choose to terminate the services you want to stop.

Disabling services
-----------

Use the "services" of the Administrator tool in the Control Panel, or enter Services.msc in the run.

Find the service you want to turn off, or double-click, or right-click Properties.

Figure

Select Start mode, change to Disabled, and then click the Stop button to stop it directly.

You can also use the command line to disable the service. Trkwks the service name mentioned above, you will also find this service in the tasklist command just now.

sc config Trkwks start=disable

Hope to help some friends!

What is Svchost.exe? Why it's always running