|
View PDF | Print View
|
Understanding The Svchost Processes
| When you use Windows Task Manager to list the processes executing on your machine you will probably see several instances of one process. This process is listed as Svchost.exe. It is used by many operating system components in addition to some applications.nnSvchost.exe is usually stored in the System subdirectory contained in the directory where the Windows operating system is housed. Svchost.exe is a Generic Host Process for Win32 Services. It is used for controlling 16-bit-based dynamically linked library files (DLL files). This includes supplementary support applications. nnNow, lets explain what all that is saying. Simply it means that since DLL files cannot start by themselves, they need another program to host and start them. Svchost.exe will host and start the DLLs. the Svchost process is only used for 16-bit DLL files. More and more DLLs these days are 32 and 64-bit. But still there are 16-bit DLL files necessary for most aging applciations.nnIn the old days before operating systems became much more complex, many pats of the operating system and applications were run by simple EXE files, called executables. As operating systems started to grow and become more complex, Microsoft made the decision to run more software functionality from DLLs. However, since DLLs are unable to launch themselves. They need at least one executable program to be a bridge between the DLL process and the operating system. This is the host Svchost.exe. nn Therefore, the operating system has a very important component in Svchost.exe. Svchost.exe efficiently contains and dispenses Win32 services for the DLLs and performs functions for the running of its own tasks. Acting as a host, and executes multiple instances of itself when necessary. One for each DLL that calls for its assitance to run. To answer the first wuestion we asked, this is why Windows Task Manager will most likely list several processes all with the name svchost.exe. The multiple executions of the file svchost.exe contribute to the stability of the operating system. Having the multiple instances reduces the possibility of a crashing process that could possibly cause other processes to have problems, thereby creating a system-wide crash in the computer. nnThere have been other uses found for Svchost, a malicious use. Svchost is used as a decoy. Files are created with similar names to Svchost.exe that are actually Trojan viruses. Files having names like Svchostl.exe and Svchosts.exe have been identified as being processes that run Trojan viruses. Trojan viruses can easily break through the security of your machine and eventually allow for the stealing of passwords and other personal information. is found on your machine, but if either is, found on your computer, they are a severe security risk. The processes should be immediately terminated. Then a system scan should be performed and those files and processes deleted. |
About the Author
Henry A Marshall is a member of the Find OS Info team that maintains a website, a> The website contains information on over 100,000 processes, files, and modules used by the Windows operating systems and the 1000's of applications that run under Windows. For more information on Svchost.exe please visit nGet a Unique Version of this Article Article Marketing
Rating: Not yet rated
Comments
No comments posted.Add Comment
You do not have permission to comment. If you log in, you may be able to comment.