Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

6 instances of svchost.exe running

Nov 17, 2003 2:13AM PST

One (and only one) of my workgroup computers (XPpro)( Intel D854 MB, P4@2.4,lan,firewalled,etc)has way more scvhost than I've ever seen, ran the usual spyware-etc checks, local and online AV checks ok,computer itself appears to run ok, how can I figure out what they are each for??? TIA

Discussion is locked

- Collapse -
Re:6 instances of svchost.exe running
Nov 17, 2003 2:32AM PST

Look up information on the TASKLIST command and add /SVC to the command to see what each does.

SVCHOST is a little like the RUNDLL of prior windows. You'll see it run instead of a full fledged program.

Bob

PS? Where to research? http://www.google.com

- Collapse -
Re:6 instances of svchost.exe running
Nov 17, 2003 2:52AM PST

I found the following info on SVCHOST:

If you see a Svch0st.exe you have one of the Backdoor.Graybird viruses.
Note : the letter between the "h" and the "s" in the name of the file is a zero, not the letter "o".

Or Svchost32.exe the you have a virus. It may be one of the following viruses : Backdoor.IRC.Zcrew, W32.HLLW.Deborms.C, or the W32.Paylap.@mm virus which mimics a PayPal account renewal screen. Note that there are other lesser known, or newer (!!) viruses which also show as a program called SVCHOST32.EXE.

Here is the link:
http://www.answersthatwork.com/Tasklist_pages/tasklist_s.htm