What does the svchost.exe file do?
The svchost.exe process is also known as Host Process for Windows Services or, as the case may be, Generic Host Process for Win32 Services and is a part of Microsoft Windows Operating System or, as the case may be, Background Intelligent Transfer Service. This software is produced by Microsoft (www.microsoft.com) or, as the case may be, Intel (www.intel.com). An obsolete or defective version of svchost.exe can cause problems for your computer that can range from slowness to error messages such as these:
- Host Process has stopped working. Windows is checking for a solution to the problem... (Windows 10, 8, 7)
- Host Process has stopped working. A problem caused the program to stop working correctly. Windows will close the program and notify you if a solution is available. (Windows 10, 8, 7)
- svchost.exe has encountered a problem and needs to close.
- Access violation at address FFFFFFFF in module svchost.exe. Read of address 00000000.
Free PC Check
Take advantage of our Free Computer Check to identify problems with svchost.exe
Scan your computer today at no charge with the Windows Repair Tool. This tool helps repair Windows and helps it run faster.
More information about Outbyte and Unistall. Please review Outbyte EULA and Privacy Policy. Outbyte scanner and repair are free. An advanced version must be purchased.
What you should know about svchost.exe Host Process
svchost.exe is a Windows system file. Svchost.exe is found in the C:\Windows\System32 directory.
Frequently occurring are file sizes such as 20,992 bytes (45% of all these files), 14,336 bytes as well as 38 other variants.
It is a Windows system file. The program executes in the background, and can only be terminated using Windows Task Manager. The original file was created by Microsoft. The file itself can therefore be considered trustworthy.
For this reason, 5% of all experts consider this file to be a possible threat. The probability that it can cause harm is high.
svchost.exe is a system file used by Microsoft Windows, and appears in Windows Task Manager as a process named "Host Process." However, some viruses or Trojans use the same file name in order to remain undetected (e.g. Gen:Variant.Zusy.949 (recognized by BitDefender), as well as BKDR_FYNLOS.SMIA or, as the case may be, HKTL_NETCAT (recognized by TrendMicro)).
To be really safe, you should scan your computer with two different anti-virus engines. You can use a free Anti-Malware scanner for this purpose.
Objectionable files with the same file name have the following characteristics:
- A svchost.exe file has a 58% certainty of being dangerous if it is found in a subdirectory of C:\Windows. In this case, the file size is usually 20,992 bytes (12% of all these files), 1,563,136 bytes as well as 94 other variants. This svchost.exe process does not appear as a visible window, but only in Task Manager. This file is no part of Microsoft Windows. File properties have not been internally documented by the producer or developer. Svchost.exe is not a Windows system file, but it is nontheless located in the C:\Windows folder. Svchost.exe is capable of supervise programs as well as record keystrokes.
- A svchost.exe file has a 40% certainty of being dangerous if it is found in the C:\Windows directory. In this case, the file size is usually 20,480 bytes (56% of all these files), 36,352 bytes as well as 26 other variants. The svchost file is not part of the Windows operating system. This particular software does not appear as a visible window, but only in Task Manager. To verify its trustworthiness, Microsoft has provided it with an embedded certificate. Svchost.exe is capable of monitor other applications as well as interpret keystrokes.
- A svchost.exe file has a 76% certainty of being dangerous if it is found in a subdirectory of "C:\Users\USERNAME". In this case, the file size is usually 3,299,862 bytes (11% of all these files), 3,301,910 bytes as well as 66 other variants.
- A svchost.exe file has a 64% certainty of being dangerous if it is found in a subdirectory of "C:\Program Files". In this case, the file size is usually 8,161,008 bytes (10% of all these files), 4,026,368 bytes as well as 16 other variants.
- A svchost.exe file has a 63% certainty of being dangerous if it is found in the Windows Temp directory. In this case, the file size is usually 409,088 bytes (33% of all these files), 972,814 bytes as well as 11 other variants.
- A svchost.exe file has a 50% certainty of being dangerous if it is found in a subdirectory of C:\Windows\System32. In this case, the file size is usually 269,824 bytes (33% of all these files), 1,169,224 bytes, 566,955 bytes, 338,814 bytes or, as the case may be, 13,179,660 bytes.
- A svchost.exe file has a 52% certainty of being dangerous if it is found in a subdirectory of C:\. In this case, the file size is usually 449,536 bytes (16% of all these files), 155,648 bytes as well as 4 other variants.
- A svchost.exe file has a 78% certainty of being dangerous if it is found in the C:\Windows\System32\drivers directory. In this case, the file size is usually 237,568 bytes (20% of all these files), 194,560 bytes, 189,187 bytes, 75,264 bytes or, as the case may be, 221,696 bytes.
- A svchost.exe file has a 58% certainty of being dangerous if it is found in in a subdirectory of the Windows Temp folder. In this case, the file size is usually 172,032 bytes (50% of all these files) or, as the case may be, 645,120 bytes.
- A svchost.exe file has a 64% certainty of being dangerous if it is found in the "C:\Users\USERNAME" folder. In this case, the file size is usually 145,408 bytes.
- A svchost.exe file has a 52% certainty of being dangerous if it is found in a subdirectory of C:\Windows\System32\drivers. In this case, the file size is usually 26,624 bytes.
If you see this file on your hard drive or in Windows Task Manager, please make sure that it is not a malicious variant. It's a fact that many trojans try to cloak their true identity by calling themselves svchost.exe. With the above information or by using tools like Security Task Manager you can determine if, in your case, the file is an undesirable variant.
What do other computer users say about svchost?
Service Host Process for services that are run from DLLs Alex | |
Microsoft Dienst Tino | |
I find that this takes 100% CPU but after 15 to 20 minutes it returns back to normal CPU usage. During this period of 15 to 20 minutes I don't do anything on my LT. It started in my LT especially when it goes to hibernate and when restarted again. (further information...) Ramesh |
Summary: 194 users judge svchost.exe to be an essential file that should not be touched. 31 users consider it harmless. However, 78 users consider this to be a suspicious process and would like to get rid of it. For this reason, 189 users have already deleted svchost.exe. source: file.net
How to uninstall the program or Background Intelligent Transfer Service
To remove Host Process from your computer, please follow the manual instructions below or use an automatic uninstaller product.
- Click the Windows Start Button. You find it in the lower left corner of the taskbar.
- Type the word uninstall.
- Click Add or remove programs.
- Now locate the program or Background Intelligent Transfer Service in the list of displayed applications.
- Click the program, and then click Uninstall.


How to tell if svchost.exe (Host Process) was uninstalled cleanly
After uninstalling, restart your computer. Then start Windows Explorer and see if there is still a folder with the name of the software under C:\Program Files. Be sure to check the Registry as well for remnants of Host Process. To do this, start "Regedit", then look under "HKEY_LOCAL_MACHINE" > "Software" for Host Process or the name of the producer. Always keep in mind that only a computer professional should ever directly delete entries in the Windows Registry.
What to do if a program does not uninstall
The easiest way to remove any kind of software cleanly and accurately is to use an uninstaller tool. Because the uninstaller automatically creates a backup, there is no risk of anything going wrong.
Last but not least
If Windows not working quite right for you, or if startup is taking a long time, or svchost.exe is causing problems for you, a good Windows diagnostic tool may very well help. This is especially effective when it comes to older computers that have accumulated vast quantities of "garbage data" as the result of many software installs and uninstalls.
Users with an interest in svchost.exe have also been interested in: winwb.exe sdhook32.dll ssv.dll svchost.exe jp2ssv.dll explorer.exe csrss.exe wltrysvc.exe [index]