Why so many svchost.exe in task manager/processes in XP SP3?

There are like 8 + svchost.exe in the Manager of tasks/processes all ate

my memory and I have 4 GB of ram, I have a dual core cpu Intel 6300 Hz 1.86

Windows XP Media Center SP3

To help understand your processes svchost.exe and what is running under them, read this article and you will be smarter than the average bear:
http://www.bleepingcomputer.com/tutorials/tutorial129.html

You may be able to get clues with what is happening with your svchost.exe process using the Task Manager and maybe understand.

You will always be able to understand what is happening with your svchost.exe process if you use Process Explorer.

Download Process Explorer, so you can see what is 'really' running on your system, especially behind those svchosts several process see you in the running task manager.

Download Process Explorer from here:

http://TechNet.Microsoft.com/en-us/Sysinternals/bb896653.aspx

You'll like Process Explorer when you get the hang of it.  Process Explorer is the Manager of Windows taskbar on steroids.

Process Explorer installs nothing so it won't slow down your system since it works only on request.

Process Explorer can seem a little intimidating at first because it has so much information, but you will begin to make love the way it works when you're looking for performance problems.   You can even say EP you want it to be your new default 'Task Manager' value in the future.  You can always run the original tasks as Manager.

Once you get Process Explorer running, expand the columns, made drag the corners of the screen for it's largest, etc., so you can see as much information as possible in the window.  Now you can really see what is running on the system.

Here's a screenshot of my poor system when I use Process Explorer:
http://img222.imageshack.us/img222/2567/ProcessExplorer.PNG
The CPU column is usually the most interesting start with performance issues - which uses the most?

It is OK and normal to have several svchost exe processes running.  Important XP Services are actually running under svchost.exe processes. There are sometimes an XP Service that runs under a svchost.exe process, sometimes there are several Services in XP, which runs under a svchost.exe process.

Sometimes malware will hide behind a svchost.exe process because the malware knows that you won't be able to find it in the Task Manager.  He will hide behind a svchost.exe process to deceive you, but you can outsmart it.

Malicious software can disguise itself also seems to be a legitimate process of XP or he could hide under/behind other processes that you see running in Task Manager if you can't see the execution.

The malware would trick you into thinking you must use a System Restore Point, run a repair install or reinstall your XP from scratch when you really don't.

Looking at the display in process Explorer, you want the CPU most to be associated with the system idle process.  It's 'free time' on your system, so more time there, more free.

If you look at the graphs of performance and see red spikes (or not) double click the graphic in the upper left corner to display the graph to use.  Move the mouse over any pics to see what are the causes.  Even if the Spike has already scroll screen, you can still move the mouse over the edge to see what caused.  You can also just wait for a pic to happen and then see what caused the Spike.

If you think one of your svchost.exe process is out of control or run amok, understand that some malware will hide as a process behind one of your several svchost.exe processes.  All what you will see in the Manager of tasks is a svchost.exe process that has run amok.

The malware knows that you won't be able to see it in the Task Manager.  The malware hope you will do something drastic like use a Restore Point, perform a repair installation, or even to reinstall your XP from scratch.

No matter what you use for software malware, detection and removal do this first:

Download, install, update and do a full scan with these free malware detection programs:

Malwarebytes (MMFA): http://malwarebytes.org/
SUPERAntiSpyware: (SAS): http://www.superantispyware.com/

They can be uninstalled later if you wish.

Tags: Windows

Similar Questions

  • I have 8-10 instances of svchost.exe in the Manager of tasks at a given time. XP SP3/w 4 gig of ram.

    The title is the question. I have 8-10 instances of svchost.exe in the Manager of tasks at a given time. XP SP3/w 4 gig of ram. Is this normal?

    I often have problems with General slowness and svchost uses a lot of ram.

    Any ideas?

    Chris

    First of all, it's normal (in general).

    Use Process Explorer instead of Task Manager to learn more:

  • What is w8edc4.exe and winyxci.exe in the Task Manager processes

    I see these two exe files in my XP Task Manager process, but Google and Bing cannot find any info on them. I guess they are some kind of virus, but am not sure.

    Sometimes, when a malware gets on your system, it will take on a name composed of a few letters and random numbers.

    If you can't find them in a search on the Internet and the suspicious look (like those that do) file names, your system probably now has or has had a malware infection.

    Perform scans for malware, and then fix any problems:
    Download, install, update and do a full scan with these free malware detection programs:
    Malwarebytes (MMFA): http://malwarebytes.org/
    SUPERAntiSpyware: (SAS): http://www.superantispyware.com/
    They can be uninstalled later if you wish.

  • in the Task Manager, processes is called xxfirefox.exe is - this legitimate?

    Upgrade to Firefox 9, when I look in the Task Manager, the name is XXFIREFOX.exe. Firefox has been hijacked or is the new name for the v4?

    The main Firefox process is always named firefox.exe in Windows 32-bit operating systems.

    I would be very suspicious of a process named XXFIREFOX.exe. My advice is to run a full scan with your anti-virus software, and who does not find a problem if doing a "search > for files and folders" for this executable.

  • Black screen - cannot run Explorer.exe with Task Manager

    Hi guys

    I've been Googling the answer to that for the last day and nothing seemed to work.

    Basically, my portable was working fine until this morning, when I restarted. After the home screen, just a rear screen with the mouse. CTRL ALT DEL and everything still works normally. I can run programs with the Task Manager, but can not run explorer.exe. He returned in the process for about 10 seconds then disappears. I think that it is the cause of the black screen. I tried downloading an own explorer.exe and replace the explorer.exe in C:\Windows\. My computer it did not as he said I need the permission of the administrator, but of course, I am the Admin so I don't know what that's all.
    I tried to restart in Mode safe and that works very well, still, I can't replace the explorer.exe in the C:\Windows\ because I do not have the administrative authorization. I tried to change it in the Security tab of the properties, or impossible.
    I also tried to update the driver software graphics cards, checked the Shell in the registry value and made sure it's explorer.exe, used the difficulty of black of Pevx screen, used HitmanPro and Windows Malicious Software Removal Tool to scan and remove malware. I even did a scf/scannow, checked driver C a mistake (which took 3 hours!), let Windows Startup Repair to fix things, tried a system restore but failed. He says that the anti-virus (Sophos) prevented the restoration of the system, so I've temporarily disabled its access scanning on but still unable to restore to a previous (11/01). Program changes that recent such as listed in the system restore is Google + Auto BackUp who came when set Picasa to date there 3 days and a more recent version of Facebook video call I've ever used. I am now running a scan with Sophos, not too promising.
    So yes, I tried everything. I think that now, there are only three options:

    1 somehow replace the explorer.exe in C:\Windows\ with this new cool explorer.exe, which I downloaded, with the permission of the administrator
    2. try another restore of the system, but I'm sure that nothing will happen, already tried three times.
    3 reinstall Windows 7 Edition Home Premium. It will be a real pain.

    So please help me! I have courses of due on Monday and this portable do not let me what that be done. Thank you!!!

    Please ignore the other my long answer. The problem has now been resolved.

    After trying all kind of scans, drinking and sobbing, I came across TDSS Killer from Kaspersky, who managed to catch a 1 latest unique malicious software (that I was too stupid and really looked hopeless and remember the name of), it cures the problem after reboot. Now, the laptop works well like you wouldn't believe. I'm still confused but way too happy now to care. Thanks a lot for your help nevertheless!

  • The Task Manager process "chrome.exe * 32" is cited 9 times. Is this ok?

    Looking at my task manager to see how it goes, I noticed that "chrome.exe * 32" is cited 9 times. Is this ok?

    It is certainly true for IE is probably for Chrome.

    More generally one or two process entries that you have [or have recently] tabs open in your browser.  For example, I have three tabs open and recently closed two others - I have listed seven process for IE.

  • Freezes on Web sites in flash like Youtube. The Watch Windows Task Manager process FlashPlayerPlugin opens and crashes again and again. Up to date - how can I solve this problem?

    Firefox crashes whenever I open a site in flash like Youtube. If I open to the process task manager, then I see that flashplayerplugin will try and start over and over again and seems to hang over and over again. My Firefox and flash player are up to date. I tried to uninstall and reinstall firefox and flash player. I tried to turn off all the other modules. I even tried to install older versions of flash player, and nothing has worked. My wife uses Firefox to work, so is it possible to fix it?

    You can check for problems with the latest version of the Flash plugin and try these:

    • disable an eventual extension of the browser for Firefox Plugin RealPlayer Record and if installed RealPlayer update
    • Disable protected mode in the plugin Flash (Flash 11.3 + on Windows Vista and later versions)
    • turn off hardware acceleration in the Flash plugin

    Alternatively, you can try to disable hardware acceleration in Firefox.

  • Print the Windows Task Manager process list

    Is it possible to print a list of 'Processes' that appear in the Windows Task Manager?  I would like to have a paper copy of the processes running on my machine, but I have not determined how to print list.  (I need to compare the processes running on my machine with the processes running on the machine to another, separate). Help, please!  Thank you

    In the Task Manager, go to Options and uncheck Always on Top. Then
    optimize the process.

    When finished, select Alt/Impr. Then start/run or use the Win key
    and the letter R.

    Either passing said, type mspaint and then press ENTER. Once done go to Edition and paste,
    then save the file.

    Or

    You can also use the command tasklist command line. For example, in
    Start > run, type
    /FO CSV TaskList > [click OK] C:\tasklist.csv

    This will produced a spreadsheet Excel Task Manager information

  • Svchost.exe application error, host process for Windows Services has stopped working

    Original title: Svchost.exe application error [windows loses focus]

    Every two minutes, windows 7 loses focus on the current window and I went in my event logs and found hundreds of errors of svchost.exe. Here's one of them:

    Name of the failing application: svchost.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1
    The failed module name: ntdll.dll, version: 6.1.7601.17725, time stamp: 0x4ec4aa8e
    Exception code: 0xc00000fd
    Offset: 0x0000000000018e3d
    ID of the process failed: 0x81c
    Start time of application vulnerabilities: 0x01cd7970b1953fa0
    The failing application path: C:\Windows\system32\svchost.exe
    The failed module path: C:\Windows\SYSTEM32\ntdll.dll
    Report ID: efb97cea-e563-11e1-a232-002655497401
    The error message I receive after automatic power off repairs in the center of the Action is "host process for Windows Services has stopped working" and the process that opens after the loss of focus is Werfault.exe.
    Thank you for your time.

    Hello

    1. when exactly do you get this error message?

    2 have you made changes on the computer before this problem?

    Method 1:

    Step 1:

    Try to start your computer in safe mode and check.

    Start your computer in safe mode

    http://Windows.Microsoft.com/en-us/Windows7/start-your-computer-in-safe-mode

    Step 2:

    If the problem does not occur in safe mode, perform the clean boot. Read the following article.

    How to troubleshoot a problem by performing a clean boot in Windows Vista or in Windows 7
    http://support.Microsoft.com/kb/929135
    Note: once you are done with the boot, please follow step 7 of article to reset your computer to normal startup.

    Method 2:

    Try to scan your computer with the Microsoft Safety Scanner and check.

    The Microsoft Security Scanner is a downloadable security tool for free which allows analysis at the application and helps remove viruses, spyware and other malware. It works with your current antivirus software.
    http://www.Microsoft.com/security/scanner/en-us/default.aspx

    Note: the Microsoft Safety Scanner expires 10 days after being downloaded. To restart a scan with the latest definitions of anti-malware, download and run the Microsoft Safety Scanner again.
    Important: When performing analysis on the hard drive if bad sectors are found on the hard drive when parsing tent repair this sector if all available on which data can be lost.

    Method 3:

    You try to perform the SFC (System File Checker) scan on your computer and check. Read the following article.

    How to use the System File Checker tool to fix the system files missing or corrupted on Windows Vista or Windows 7

    http://support.Microsoft.com/kb/929833

    It will be useful.

  • Why use high svchost.exe SO?

    So, I have 25% usage all the time, what is Microsoft do? Can I fix other than to go to win 10?

    [moved German forums]

    I'm talking about money it is updated for windows. Set never 'Find updates' automatic updates, restart, and install the client update KB3161647, only available in June 2016 cumulative patch.

    https://support.Microsoft.com/en-us/KB/3161608

    Best regards, VZ :)

  • Windows Task Manager process tab

    How do you find what all processes are in the Windows Manager tasks and if they should be running?

    Hello
    THiiS shows how http://www.jasonn.com/turning_off_unnecessary_services_on_windows_xp
    This shows a list of what processes are what http://www.answersthatwork.com/Tasklist_pages/tasklist.htm please click the checkbox as answered check on this Page if this post solves your problem, because it helps people who need quick access to answers THANKS AND GOOD LUCK

  • How can I know what is a svchost.exe? What windows process involved?

    I have 2 scvhost.exe running processes using a large amount of memory almost half of all memory. one is using 05% of cpu

    I have 2 scvhost.exe running processes using a large amount of memory almost half of all memory. one is using 05% of cpu

    You will need to read this:
    http://www.howtogeek.com/HOWTO/Windows-Vista/what-is-svchostexe-and-why-is-it-running/

    Please do not ask question on this subject. I have no idea.

    t-4-2

  • How to deploy the Task Manager processes

    I have install the standalone BPM due to the error of confinguration (could not create the JAVA virtual machine) in Enterprise BPM.

    How to deploy the process created in the BPM studio in the fall?

    Thank you.

    After installation of stand-alone, run the "Admin Center".

    From there, start the Web Applications of BPM. Once this starts, you should be able to click on the "launch process Admin".

    After signing in (user created during installation), click on the 'Projects' link on the left. This will display all of the ongoing projects. From there, you can 'Add' a project using the export created in studio (file-> Export).

    * Note: This implies that the installation is complete and the two databases (directory and engine) were created.

    For more information, Documentation of Administration (project management) is: http://download.oracle.com/docs/cd/E13154_01/bpm/docs65/admin_guide/modules/projects/enterprise/c_Head_Managing_Projects.html

    And the Documentation of Installation is: http://download.oracle.com/docs/cd/E13154_01/bpm/docs65/config_guide/modules/enterprise/standalone/t_SA_Config_Overview.html

    Hope that helps!
    -Kevin

  • I've just updated to the latest version of Firefox (50.0.2) and I now get 2 entries in the list of the Task Manager process - is it ok?

    I am using MS Vista Home Premium Version 6.0.6002 Build 6002 SP2 on a fairly old Toshiba Satellite L350

    More than one process is normal for the current Firefox. http://www.gHacks.NET/2016/07/22/multi-process-Firefox/

    Firefox multiprocess is the code name "e10s. https://wiki.Mozilla.org/Firefox/multiprocess

  • Svchost.exe in the Task Manager

    Why svchost.exe in the Manager of tasks to the percentage high then low then high again?

    Hi dano92,

    Refer to the Microsoft article below to learn more about the svchost.exe in Windows XP.

    A description of Svchost.exe in Windows XP Professional

    http://support.Microsoft.com/kb/314056

Maybe you are looking for