javascript contador Skip to content

What is Svchost.exe and why it is always open in Windows

What is Svchost.exe and why it is always open in Windows

What is Svchost.exe and why it is always open in Windows

Service Host is a Windows process that must always be open. However, there may be several problems around it.

Like Google Chrome, this Windows service runs quite a few processes in the background. We may be looking at the task manager and find it. And it is that some day we will have seen it, because there are enough processes, at least 16 (the number increases to 67 in my case counting the threads). The normal thing is that at the performance level we do not even notice that these services are there, but in very specific cases we know that we could notice a decrease in the processing speed of our PC due to some problem related to any of them.

These processes are found in the Task Manager (It is accessed by pressing CTRL + ALT + DELETE and then choosing the Task Manager). Once inside, we expand the window and move to the third section, the one called Windows Processes.

Svchost.exe is the generic host process name for services running from dynamic link libraries (DLLs)

Knowing what the Service Host is will make us better understand the operation of our computer, which after all, even if in a very basic way, is necessary. We can prevent viruses and malfunctions.

The Service Host (svchost.exe) is process that runs chunks of programs (a DLL, come on). By themselves they don’t have the ability to work, so they need an executable to do it. The advantage of DLLs is that we can reuse the code that is already written, in addition to that we can update it immediately without having to change anything else. . Normally these are the necessary processes and therefore always remain open:

  • Service Host: Windows Backups.
  • Service host: DCOM server process initiator.
  • Service host: Remote procedure call.
  • Service Host: IIS Application Host Auxiliary Application Service.
  • Service host: Network service.
  • Service host: Local service.
  • Service host: Local service (restricted network).
  • Service host: Local service (without network).
  • Service host: Local service (without impersonation).
  • Service Host: Unistack Service Group.
  • Service host: UtcSVc.

Why are there many Service Host processes open?

There are so many svchost.exe processes to segment risks. If it was only one, when it collapses, the entire system will crash. It is like when you invest money: if you put everything in an asset, and you lose it, you are left with nothing; So that’s why you have to diversify capital, which is the most important thing. In this case the most important thing is the full functioning of the PC, so it is what you have to protect.


Services They are organized by logical groups. Thus, a process hosts the 3 services related to the firewall, while another is in charge of executing those related to the user interface. Each of those services are what are called threads.

The Service Host: Local system consumes a lot of disk and a lot of memory

Normally, it does not occupy more than 4 MB of memory (memory usage can be shot up to 5,000 MB) and not more than 0.3 MB of disk, but in certain cases it can consume resources in a very exaggerated way. CPU usage can even go as high as 30%, irretrievably causing other applications, both background and foreground, to slow down.


Even given the case, it could consume more Internet than it should (0.5 MB, for example, is too much, since not even Google Chrome consumes as much). The best thing in these cases is restart the process that is failing. We just have to find it, click with the click right on it and choose Finish homework.

Scvhost.exe is a virus?

effectively Scvhost.exe is a virus posing as the Service Host (Svchost.exe) If you look closely, the v and c are where they shouldn’t be. The correct process is svchost.exe and not scvhost.exe. Another option is that the name of the service is correct but that there are still some viruses taking advantage of it (replacing it) to use the resources of your PC without raising suspicions. In both cases it is better to spend a antimalware Malwarebytes type.

To know what is the exact name of the process we can do the following:

  • Open the Task Managerusing the key combination Ctrl + Alt + Delete.
  • We seek the process for which we want to know more information.
  • We give click right and when the context menu opens click on Properties.
  • A pop-up window will open and tell us, among other things, the name of the process. If it is svchost we can be calm (even so, if we have suspicions, we should pass a antimalware).
  • It is also recommended to look at the location. It must be C: Windows System32. In case it is not that, with a 100% probability it is a virus.