is a generic host process name for services that are run from dynamic-link libraries called DLLs. This is a valid system process that belongs to the Windows Operating System which handles processes executed from DLLs. At startup, Svchost.exe checks the services portion of the registry to construct a list of services that it needs to load. Multiple instances of Svchost.exe can run at the same time
. Each Svchost.exe session can contain a grouping of services. Therefore, separate services can run, depending on how and where Svchost.exe is started. This grouping of services permits better control and easier debugging. The legit Svchost.exe file is located in the %SystemRoot%\System32 folder.
If its running as a startup/shows in msconfig, this can be bad. See here
Also make sure of the spelling
. If its scvhost.exe
this a trojan. See here
Microsoft has replaced tlist.exe with tasklist.exe in XP. Tlist.exe lets you list all the processes running on your machine and the associated task name and memory usage. Tasklist.exe replicates all the functionality of the original utility and displays a list of active processes. The /SVC switch shows the list of active services in each process.
To view the list of services that are running in Svchost:
1. Click Start
> then click Run
2. In the Open box, type CMD
3. Then press ENTER.
4. Type: Tasklist /SVC
5. Then press ENTER.
For information about tasklist.exe, type the following at the XP command prompt: tasklist /?
For more information about a process, type the following command, and then press ENTER:Tasklist /FI "PID eq processID"
(with the quotes)
You can also download and use Process Explorer
by Sysinternals to investigate all processes and gather additional information to identify and resolve problems.