Information and help with Windows svchost.exe.
Microsoft Windows executable file labeled as: "Generic Host Process for Win32 Services". This is a required Windows file and is used to load needed DLL files that are used with Microsoft Windows and Windows programs that run on your computer.
This file is located in either the c:\windows\system32 or c:\winnt\system32 directories depending on your version of Windows and may also be located in the dllcache directory if present.
Multiple svchost.exe files are loaded when a program needs to be grouped from other Windows services. This is a normal operation of Windows and it is common to see three or four svchost.exe in the Task Manager processes.
There are viruses that can infect this file and may run as a SVCHOST.EXE service. If you think your computer may be infected with a computer virus that is causing problems with this service, we recommend you update your virus protection program and visit the Microsoft Windows update page instead of attempting to manually fix the problem.
If your anti-virus protection software does not detect a virus or other malware your computer is not infected and the svchost.exe file is not a virus.
SVCHOST.EXE error with 0xe03c3a68 or computer crashes with this file when opening Microsoft Internet Explorer
Users experiencing an error with the above memory address are infected with the blaster virus.
This file is an important Windows file and needed by Windows. Removing this file would cause Windows to no longer function. If this file is infected with a virus your anti-virus program should be able to quarantine or delete the file.
To determine what are in the svchost.exe file you will need either tlist.exe if you are running Windows 2000, or tasklist.exe if you are running Windows XP. Windows users can also view what is running under svchost through Windows defender.
Running the tlist program
Windows 2000 users can run this program by clicking Start / Run and type "command" or "cmd" and press enter. From the MS-DOS prompt, type "tlist -s" and press enter.
Windows XP users can run this program by clicking Start / Run and type "command" or "cmd" and press enter. From the MS-DOS prompt, type "tasklist /svc" and press enter.
* If you are unable to run or locate this file on the computer, see below steps on installing this file onto your computer.
Tlist Windows 2000 Installation
If you do not have this file you will need to install the Microsoft Windows 2000 support tools. To do this, place the Windows 2000 CD into the computer and run setup.exe from \SUPPORT\TOOLS directory.
Tlist Windows XP Installation
Windows XP Home users will need to download the file Tasklist.exe.
Windows XP Professional users that are unable to locate this file can expand it from the i386 directory on their Windows XP Professional CD or download the file from the above link. Unfortunately, the Windows XP Home CD does not contain this file.
Example of what is seen in tlist:
Below is an example of what Windows 2000 would display for the svchost services. With tlist.exe or tasklist.exe you should see information similar to the below example.
444 svchost.exe Svcs: RpcSs
552 svchost.exe Svcs: EventSystem,Netman,NtmsSvc,RasMan,SENS,TapiSrv
792 svchost.exe Svcs: wuauserv
Viewing running processes through Windows defender
Microsoft Windows Defender is also capable of viewing all applications and processes running including those within svchost can be found through Windows Defender as explained below.
- These steps require that you have Windows Defender installed on your computer.
- Open Windows Defender if not already open by clicking Start, Programs, and clicking Windows Defender.
- Click Tools.
- Click Software Explorer.
- Click the down arrow next to Category and click Currently Running Programs.
Any "Microsoft Generic Host Process for Win32 Services" for Windows XP users or "Microsoft(R) Windows (R) 2000 Operating System" items listed in the list are portions of the svchost.