What's svchost?

What's svchost?

What is the Svchost.exe process? To put it simply: Svchost.exe is a system program that belongs to Microsoft's Windows operating system, and Microsoft's official explanation is that Svchost.exe is the generic host process name for a service running from a dynamic-link library (DLL). This program is very important to the normal operation of the system and cannot be terminated.

Windows system processes are divided into separate processes and shared processes, and the "Svchost.exe" file exists under the "%systemroot%system32" directory and belongs to the shared process. As Windows system services continue to increase, in order to save system resources, Microsoft has a lot of services into a shared way, to the Svchost.exe process to start. But the Svchost process serves only as a service host and does not implement any service function, that is, it can only provide the conditions for other services to be started here, and it cannot provide any service to the user.

The service host process is a standard dynamic connection Library host processing service. Svchost.exe files are a common host process name for services that run from a Dynamic Connection library (DLL). The Svhost.exe file is positioned under the system's Windowssystem32 folder. At startup, Svchost.exe examines the registry's location to build a list of services that need to be loaded. This will cause multiple Svchost.exe to run at the same time. Windows 20,001 has 2 svchost processes, one is the RPCSS (Remote Procedure Call) service process, the other is a Svchost.exe shared by many services, and in Windows XP, There are generally more than 4 Svchost.exe service processes; There are more in Windows 2003 server. Svchost.exe is a core process of a system, not a virus process. However, because of the particularity of the Svchost.exe process, the virus will do everything possible to invade Svchost.exe. You can confirm whether poisoning is possible by looking at the execution path of the Svchost.exe process. If you suspect that your computer may be infected with a virus, an exception can be found by searching for a Svchost.exe file if the Svchost.exe service appears unexpectedly. Usually only in the C:windowssystem32 directory to find a Svchost.exe program, if you found in other directories Svchost.exe program, it is likely to be poisoned. Computer Tutorials

However, svchost.exe process is often easily used or replaced by Trojans, because everyone thinks svchost.exe is our computer common system process, in the resource manager will appear more than one svchost.exe, in fact, this normal. But also because of this normal, hackers took the opportunity to, spread Trojan virus. If the Svchost.exe is damaged or replaced by the virus will cause the computer to run slowly slow svchost.exe occupy a lot of memory, CPU use to reach 100%. Not only that, the virus would also steal computer data from netizens and destroy computers. This time we found that the process of a large number of system resources, it is necessary to use anti-virus software for the overall scan, users need to completely kill svchost.exe virus can be perfectly cleared.