SVCHOST.exe

[dave]

In Windows Task Manager under Processes I have four entries
SVCHOST.exe Local Service 3,100K
SVCHOST.exe Network Service 1,900K
SVCHOST.exe 16,160K
SVCHOST.exe 2,720K

What are these and can I safely disable them?
Any help and advice would be greatly appreciated.

Dave

[Ramesh [MVP]]

Dave,

Description of Svchost.exe in Windows XP:=20
http://www.mvps.org/sramesh2k/svchost.htm

--=20
Ramesh - Microsoft MVP
http://www.mvps.org/sramesh2k
-----------------------------------------



"dave" > wrote in message =
...
In Windows Task Manager under Processes I have four entries
SVCHOST.exe Local Service 3,100K
SVCHOST.exe Network Service 1,900K
SVCHOST.exe 16,160K
SVCHOST.exe 2,720K

What are these and can I safely disable them?
Any help and advice would be greatly appreciated.

Dave

[Rick \Nutcase\ Rogers]

Hi Dave,

Read the article Ramish posted. I would only be concerned if one of those
svchost.exe files was found under C:\Windows\system32\WINS - that would be a
virus, the copy found in the system32 folder is normal. Multiple instances
of svchost in Task Manager is normal as well.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!
http://mvp.support.microsoft.com/
Associate Expert - WinXP - Expert Zone
www.microsoft.com/windowsxp/expertzone
Win98 Help - www.rickrogers.org

"dave" > wrote in message
...
> In Windows Task Manager under Processes I have four entries
> SVCHOST.exe Local Service 3,100K
> SVCHOST.exe Network Service 1,900K
> SVCHOST.exe 16,160K
> SVCHOST.exe 2,720K
>
> What are these and can I safely disable them?
> Any help and advice would be greatly appreciated.
>
> Dave

[David H. Lipman]

You have infected copies running !
Please go to McAfee (http://www.mcafee.com/myapps/mfs/default.asp) and/or Trend
(http://housecall.antivirus.com ) and perform an online scan of your platform then report
back your results.

Dave L.



"dave" > wrote in message
...
| In Windows Task Manager under Processes I have four entries
| SVCHOST.exe Local Service 3,100K
| SVCHOST.exe Network Service 1,900K
| SVCHOST.exe 16,160K
| SVCHOST.exe 2,720K
|
| What are these and can I safely disable them?
| Any help and advice would be greatly appreciated.
|
| Dave

[Gummo]

I've got these entries also and neither on-line checks with Symantec and
McAfee nor with AVG has turned anything up.


"David H. Lipman" > wrote in message
...
> You have infected copies running !
> Please go to McAfee (http://www.mcafee.com/myapps/mfs/default.asp) and/or
Trend
> (http://housecall.antivirus.com ) and perform an online scan of your
platform then report
> back your results.
>
> Dave L.
>
>
>
> "dave" > wrote in message
> ...
> | In Windows Task Manager under Processes I have four entries
> | SVCHOST.exe Local Service 3,100K
> | SVCHOST.exe Network Service 1,900K
> | SVCHOST.exe 16,160K
> | SVCHOST.exe 2,720K
> |
> | What are these and can I safely disable them?
> | Any help and advice would be greatly appreciated.
> |
> | Dave
>
>

[Cerridwen]

David H. Lipman wrote:
> You have infected copies running !
> Please go to McAfee (http://www.mcafee.com/myapps/mfs/default.asp)
> and/or Trend (http://housecall.antivirus.com ) and perform an online
> scan of your platform then report back your results.
>
> Dave L.

Stop scaremongering! How in Hades do you know?! Read Rick's post. It's only
a virus file if it's in a specific folder. It is perfectly normal to have
more than one instance running - I have three. Now, get your facts right
before posting!

[David H. Lipman]

It is if it is ONE particular infector located in the indicated folder. However,
SVCHOST.EXE is the target of numerous viruses, Trojans, worms, and parasites. There are
also *many* variations that haves names similar to SVCHOST. All too often I see that it is
misspelled and the person is indeed infected.

There is NOTHING wrong with having multiple instances of the executable running, the sizes
look suspicious.

Dave



"Cerridwen" > wrote in message
...
| David H. Lipman wrote:
| > You have infected copies running !
| > Please go to McAfee (http://www.mcafee.com/myapps/mfs/default.asp)
| > and/or Trend (http://housecall.antivirus.com ) and perform an online
| > scan of your platform then report back your results.
| >
| > Dave L.
|
| Stop scaremongering! How in Hades do you know?! Read Rick's post. It's only
| a virus file if it's in a specific folder. It is perfectly normal to have
| more than one instance running - I have three. Now, get your facts right
| before posting!
|
|

[Alex Nichol]

dave wrote:

>In Windows Task Manager under Processes I have four entries
>SVCHOST.exe Local Service 3,100K
>SVCHOST.exe Network Service 1,900K
>SVCHOST.exe 16,160K
>SVCHOST.exe 2,720K
>
>What are these and can I safely disable them?

SVCHost provides the interface for the system to run a whole slew of
Services. They get started in batches as the system loads, you log on
and the net connection starts - hence the four instances, each running a
separate set. Leave them alone.


--
Alex Nichol MS MVP (Windows Technologies)
Bournemouth, U.K. (remove the D8 bit)