There are usually many instances of svchost.exe running because Windows requires numerous services to operate correctly.

you’re free to’t kill them, and you sure didn’t start them.

So, what are they?

Task Manager on Windows 10.

Jason Fitzpatrick / How-To Geek

What Is the Service Host Process?

But that doesn’t really help us much.

From a programming perspective, this makes code more reusable and arguably easier to keep up to date.

Service Host Process running Remote Procedure Call Services.

Instead, a shell that is loaded from a executable file is used to host these DLL services.

And so the Service Host process (svchost.exe) was born.

Why Are There So Many Service Host Processes Running?

Click the small arrow next to "Service Host" to show a more detailed list of services running.

Instead, they are separated out.

For example, one Service Host process runs the three services related to the firewall.

Another Service Host process might run all the services related to the user interface, and so on.

Right-click a Service Host process, then click "Search Online" to find more details.

Is There Anything For Me To Do With All This Information?

Honestly, not a lot.

These days,we don’t recommend disabling servicesanymore.

Right-click svchost.exe, then click "Go to Service(s)" to show more information.

Modern PCs tend to be loaded with memory and high-powered processors.

That might at least give you an idea of where to start troubleshooting.

This makes it very easy to identify which services belong to each instance of the Service Host process.

The Windows 7 Task Manager with all of the services running under

If you’re using Windows 7, things are a bit different.

You had to explore a bit to determine the services related to any particular instance of “svchost.exe.”

Just downloadProcess Explorerand run it it’s aportable app, so no need to install it.

Process Explorer showing svchost.exe running.

For our purposes here, though, Process Explorer groups related services under each instance of “svchost.exe.”

Is Service Host Process a Virus?

The process itself is an official Windows component.

Right-click the Service Host process, then click "Open File Location" to ensure that the executable is the real one.

In Task Manager, right-click any Service Host process and choose the “Open File Location” option.

Better safe than sorry!

Windows Processes

Adobe_Updater.exe|AppleSyncNotifier.exe|ccc.exe|conhost.exe|csrss.exe|ctfmon.exe|dllhost.exe|dpupdchk.exe|dwm.exe|EasyAntiCheat.exe|iexplore.exe|jusched.exe|LockApp.exe|mDNSResponder.exe|Mobsync.exe|moe.exe|MsMpEng.exe|NisSrv.exe|rundll32.exe|sihost.exe|svchost.exe|SearchIndexer.exe|spoolsv.exe|shutdown.exe|wsappx|WmiPrvSE.exe|wlidsvc.exe|wlidsvcm.exe|wmpnscfg.exe|wmpnetwk.exe|winlogon.exe

What Is This Process and Why Is It Running on My PC?

The real svchost.exe located at "C:\Windows\System32."