About the svchost process in windows (a little older), The svchost Process
This is a blog about svchost written N years ago. Although it is not well written, it is the first technical blog I wrote. Let's publish it as the first blog.
**************************************** ***********
About svchost process in windows
Svchost.exe is a very important process in the Windows operating system based on ntversions. Many viruses and Trojans reside in the system and are closely related to this process. Therefore, it is necessary to have a deep understanding of this process. This article describes the functions of the svchost process and its knowledge. Svchost Process OverviewMicrosoft defines "
: Taking Windows XP as an example, click "start"/"run" and enter "services. run the msc command to bring up the service dialog box, and then open the "Remote Procedure Call" attribute dialog box. You can see that the path of the executable file of the RpcSs Service is "C: \ WINDOWS \ system32 \ svchost-k rpcss ", which indicates that the RpcSs Service relies on SVCHOST to call the" rpcss "parameter, while t
" netsvcs "parameter, the parameter content is stored in the system registry.
Enter regedit.exe in the running dialog box and press Enter. Open the Registry Editor, find the [HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services \ helpsvc] item, and find the key "magepath" of the type "reg_expand_sz ", the key value is "% SystemRoot % \ system32 \ svchost.exe-K netsvcs" (this is the Service Startup Command seen in the service window ), in ad
example, click "start"/"run" and enter "services. run the msc command to bring up the service dialog box. Then open the "Remote Procedure Call" attribute dialog box. You can see that the path of the executable file of the RpcSs Service is "C: WINDOWSsystem32svchost-k rpcss ", this indicates that the RpcSs Service relies on SVCHOST to call the "rpcss" parameter, and the parameter content is stored in the system registry.Enter regedit.exe in the
dependent on the Svchost host exists. There are 4 to 5 Svchost under General XP. There will be more Win2003. All automatically loaded service after the boot willRun on the svchost. and specifically what service load can be viewed with the command line Tasklist/svc.One of the svchost loads a lot of services, has into a
Remote Procedure Call (RPC) service is "C: \ winnt \ system32 \ svchost-k rpcss ", which indicates that the Remote Procedure Call (RPC) service relies on svchost to call the" RPCSS "parameter, the parameter content is stored in the system registry. Enter “regedit.exe in the running dialog box and press Enter. Open the Registry Editor and find the "HKEY_LOCAL_MAC
system. It is also because of the importance of svchost.exe. Therefore, viruses and Trojans try their best to use it and attempt to confuse users with its characteristics to infect, intrude, and destroy users. How can we determine which virus process is used? The normal svchost.exe file should exist in the "C: Windowssystem32" directory. Be careful if the file appears in other directories. If you do not pay attention to the observation, it is easy to escape the eyes of ordinary users.In general
What's svchost?
What is the Svchost.exe process? To put it simply: Svchost.exe is a system program that belongs to Microsoft's Windows operating system, and Microsoft's official explanation is that Svchost.exe is the generic host process name for a service running from a dynamic-link library (DLL). This program is very important to the normal operation of the system and cannot be terminated.
Windows sys
The Svchost process has been in high CPU for many years, and Microsoft released patches to fix the problem as early as 2007, but it was for Windows XP SP2, and the same problem appeared on SP3. There is user feedback that the Svchost process will pull the CPU occupancy rate up to 100% after the new installation (clean install) of Windows XP SP3.
In November and early December, Microsoft released two update
1. The origin of SvchostWindows system services can now be divided into separate processes and shared processesIn Windows NT, only the Service Manager SCM (Service.exe) has multiple shared services. With the increase of the service of the system, in order to enhance the performanceStarted to share many services in Windows2000 and started by Svchost.exeSvchost.exe itself does not implement any service functionality, but a DLL that needs to be serviced can be loaded by
(Conversion) Figuring out why my SVCHOST. EXE is at 100% CPU without complicated tools in Windows 7, figuring
(Reproduced from: http://www.hanselman.com/blog/FiguringOutWhyMySVCHOSTEXEIsAt100CPUWithoutComplicatedToolsInWindows7.aspx)
The SvcHost.exe process hosts services that run in the background on Windows. it's literally "Service Host. "You may have a dozen services or more running inside that process.
Vchost is the most mysterious process in Windows, and many new users are puzzled by it. It is a service host for Windows, and many of the system's own services run through it. Simple analogy, it is equivalent to the system service vest. But Svchost sometimes the CPU is very high, how to see through its vest to find the real killer? We use Task Manager to find out the culprit.
STEP01 into Task Manager: Right-click in the blank space of the taskbar, se
View the "svchost" Process
Svchost.exe is a core process of Windows XP. Svchost.exe not only appears in Windows XP, but also exists in the Windows System Using ntinner. Generally, in Windows 2000, the number of svchost.exe processes is 2, while in Windows XP, the number of svchost.exe processes has increased to 4 and more.
For example, how can we identify normal svchost.exe processes and what are virus processes?
The key value of svchost.exe is in th
Recently, as long as the network is connected, the cup will be occupied by a svchost process in a few minutes. Because I have two wireless Wired connection methods, this will not happen in Wired connection, this problem occurs during wireless connection, so it is possible to eliminate the possibility of poisoning. I finally found an article to solve this problem.
Article
Reference URL: http://www.maxgo.cn/2007/03/28/109
When you run Windows au
A svchost. EXE load list is XP, and Win2000 may be different from rpcss, netsvcs, and imgsvc may belong to the System subtype. The user started in the Process Manager will display the System
-K LocalServiceAlerterRemote RegistrySSDP Discovery ServiceTCP/IP NetBIOS HelperUniversal Plug and Play Device HostWebClient
-K rpcssRemote Procedure Call (RPC)
-K NetworkServiceDNS Client
-K imgsvcWindows Image Acquisition (WIA)
-K netsvcsApplication ManagementAu
The Svchost process starts when the system is powered on, automatically networked, and then occupies a large number of networks. So how do you solve the problem?
The specific methods are as follows:
1, first in the lower left corner search area to search the control Panel, and then open, open the selection of management tools-services, of course, a lot of access to the service options, Device Manager access can also.
2. Find--background Intellige
A lot of people who use the computer find this problem--in 360 of the network traffic manager can see themselves in the absence of the Internet, no software upgrade program, or even Windows comes with the upgrade program is turned off (of course, the network must be connected in the case) the traffic display has 30~60KB /s traffic generated, a lot of people are very puzzled, what's going on? Open 360 Traffic process Manager A look, it is svchost.exe this thing is downloading things, it is strang
Svchost occupy memory too high how to solve
Click the right mouse button on my computer to select "Manage"
Select the Services option under services and applications on the right computer tutorials
Find the name of my SuperFetch service, double-click the left mouse button.
Select the Startup type as "Manual".
Click "OK" button to complete the setup
After you restart your computer, go
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.