Why is svchost exe constantly loading? What to do if svchost loads the system

Svchost.exe is an executable file that has “scared” more than one user. Although this word could be written without quotation marks. This process, with its full, one hundred percent load on the computer processor, is truly frightening.
What this process is responsible for, why the full download occurs and how to deal with it is the topic of today’s article.

Svchost virus or system process?

Svchost.exe is a process that loads dynamic DLLs. All services that use such files access this process. This operation is available in all versions of the operating system Windows systems, from the first, 2000, to the very last, tens.

In order not to waste CPU time and load RAM, the developers assigned one process to several services at once. Some users considered this decision of the developers to be erroneous, since it has a number of shortcomings. And that's why.

Important information! Svchost.exe is constantly used by attackers who create Trojans and viruses in order to disguise their executable files as this process, sometimes causing irreparable damage to the operating system. The fact that the process starts several services at once is to the advantage of malware developers. And when the user has problems and suspects viruses in the system, he launches the dispatcher, and there are almost a dozen of these svchost.exe. And how can you guess which of these identical processes is hiding a malicious file?

Since this process is a system one, allowed to be launched by the operating system, ending it is fraught with unstable operation of the computer or critical errors. Therefore, many users turn their attention to other files, hoping to find malicious codes and programs in other places in the OS.

Important information! The svchost.exe process never runs as an administrator (user). This operation is launched only by system services, NETWORK and LOCAL SERVICE, as well as SYSTEM through their mechanisms. If the operation is started by the Run section of the registry, it is a 100% viral executable file.

Ways to solve the problem with svchost.exe

Solution one: In some cases, simply restarting the computer can solve many problems, so we put this option at the forefront.

Solution two: Check for virus activity on the system. It checks itself or starts. But it’s easier to overlook viruses yourself, but the program is unlikely to make a mistake. But to be on the safe side, first check the system manually, and then run an anti-virus scan with a special utility.

Find the Processes tab.

To make checking more convenient, sort all processes depending on how they load the system or how much RAM they consume. This can be done in the Memory and CPU columns.

Click on these two columns, the system will sort the processes, and those that consume more resources will go first. You saw several svchost.exe files.

Now you should see under whose name the executable files are running. If from the system (SYSTEM), NETWORK and LOCAL SERVICE, then these are safe processes launched by the OS.

And if you are wondering on whose behalf (by what service) the svchost.exe process is running, click on each of them and go to a separate tab.

Here you will see which service initiated the launch of this process.

Only after this can you disable services one by one to solve the problem of processor reboot and high RAM consumption.

A lot of resources are usually consumed by the “IP Auxiliary Service” and the one responsible for automatic updating software computer.

Disable the first and second services one by one, but in the second case you will not receive automatic updates for operating system, and all these processes will have to be started manually.

By using support service IP is supported by IPv6, which is not widely used, so you can safely disable it. This will not affect the operation of the operating system.

There are cases when a virus disguised as svchost.exe infects the antivirus program itself installed on the operating system, and therefore it does not recognize it and produces incorrect scan results.

To ensure that scanning for virus activity is successful, do not use installed antivirus programs, but use free utilities that are designed specifically for such one-time checks, for example, from Kaspersky Lab. To run the scan, copy the program downloaded to your computer to removable media. Then turn on the system safe mode and check using the utility.

Solution three: Check for new updates for the Windows operating system, and if they appear, install them all.

Solution four: You can restore the operating system from the last checkpoint. The point is that a checkpoint is created with a fully functional operating system. And if problems arise, the system can be rolled back (restored) using a previously created checkpoint. The computer boots with operating parameters, and the operating system operates as before.

Solution five The Prefetch folder is used by the computer to launch programs and speed up the operating system. The system saves the parameters of previous downloads to this folder. Delete everything stored there. Prefetch can be found in the system directory ( Windows folder) operating system.

What is svchost.exe in Windows and why does this process load the processor so much, often up to 100%. Let's understand the svchost.exe process on Windows!

It would hardly have aroused much interest among computer users if its reputation in the heyday of versions XP, Vista and 7 had not been spoiled by viruses masquerading as this system process. However, a genuine process often brings problems: it can load the processor by 100% and, accordingly, cause terrible slowdown of the computer. Below we will talk about svchost.exe: what it serves, in which cases it can cause the processor to be 100% loaded, and in which cases, being a virus, it can also pose a threat to the computer.

1. Genuine svchost.exe

The genuine svchost.exe, the Windows host process, is a vital component of the operating system through which important system services are loaded from dynamic link libraries (DLLs). For most of these services, svchost.exe runs as a separate process. Therefore, in the “Details” tab of the Windows 8.1 and 10 task manager, you can detect the activity of several processes at once.

In Windows 7, all active processes can be seen in the Processes tab of the task manager.

Svchost.exe works with updates, Windows Defender, power management, network connections, various devices connected to the computer, and others. In Windows 7 and 8.1 systems, svchost.exe processes are launched under the names “System”, “LOCAL SERVICE” or “Network Service”, and in Windows 10 they can also be launched under the name of the current user. Launched on behalf of the user, it ensures the operation of services responsible for synchronizing mail, calendar, contacts and other owner data account.

2. Why does svchost.exe load the processor at 100%

If we are not talking about constant processor load at 100%, but about individual periods when such a problem occurs, the reason for this may be the execution of background Windows operations. These are, in particular, system updates, automatic maintenance, and indexing of disk contents after reinstalling the system. Low-power processors found in budget or older computer devices are especially vulnerable in this regard. The problem with processor load is solved on its own, respectively, upon completion of the operations. In some cases, you may need to resolve an issue caused by an installation error Windows updates.

Other possible reason svchost.exe activity with a load on system resources - processor overheating, problems with the hard drive or network card. The computer needs to be cleaned of dust and checked HDD for mistakes. You can exclude or confirm the possibility of damage to the network card by monitoring the activity of svchost.exe with the network cable disconnected.

The reason for the processor load to be 100% may be the incorrect operation of one of the services of the svchost.exe process. This, by the way, often occurs on devices with pirated modified builds of Windows installed. To figure out which of them is causal, you need to track it.

3. Service tracking

3.1. Task Manager

You can find out which service is using the CPU in the task manager. Call the context menu on the problematic process and select “Go to services”.

The manager window will switch to the “Services” tab, where they will be highlighted in a block.

In the context menu called on each individual service, Windows 8.1 and 10 systems, in addition to the stop and start commands that Windows 7 is limited to, offer, in particular, a search for information about it on the Internet. On the Internet you can find out what this service is, how problems with it are solved, and if the solution is to disable it, then whether Windows will then be able to function fully. If you need a computer urgently, and there is no time to understand the essence of the problem, you can try to stop the problematic service using the appropriate command in the context menu. If there are several of them, you will have to investigate disabling each one in turn.

Forcibly terminating the svchost.exe process itself in the task manager may result in a blue screen of death. When stopping services, the situation is a little simpler: services that are important for the functioning of the system will not be able to be disabled - either access will be denied, or the service will then start again on its own. Stopped services can then be started using the appropriate command in the context menu, and after rebooting the computer they will start themselves. Some of them, if they do not directly affect the performance of the system, but stopping them in the task manager is impossible, you can try to stop them in the Services snap-in (services.msc). In Windows 8.1 and 10 Task Manager, this snap-in is quickly accessible.

By double-clicking on the desired service, its properties window is called up, in which it is stopped with the button, respectively, “Stop”.

If it is impossible to stop the causative service, you can try to reduce the load on the processor by setting the problematic svchost.exe process to a lower priority in the task manager. In its context menu, you must select “Set priority”, then “Below average” or “Low”. However, such a solution will not be effective in every case.

3.2. AnVir Task Manager program

Some may find it more convenient to monitor the services of problematic processes through alternatives to the standard Windows Task Manager. For example, in the AnVir Task Manager program, in the same column of the table with processes, their services are displayed. The description of the service of the selected svchost.exe can be viewed in the block with detailed information, which will appear after double-clicking on the graph of the selected process.

You can go directly to the svchost.exe process services using the program’s context menu by clicking “Go”, then “Go to service”.

And in the context menu for Windows services, you can select either the stopping command “Stop” or “Change startup type”, then “Disabled (Quarantine)” if stopping is impossible. Here, in the context menu for each individual service, you can get online help.

Any kind of experiments with disabling services - either through the standard Windows functionality or using third party programs– it is better to do this by first creating a system restore point.

4. Universal Windows Troubleshooters

If you do not treat the symptoms, but deal with the problem itself, universal means of eliminating errors in Windows work such as: disk cleanup, system registry cleanup, integrity check system files(sfc/scannow). And Windows Clean Boot mode will help determine whether the svchost.exe activity that is loading the processor is actually related to system services. Third party software services may be causing the problem.

5. Viruses masquerading as svchost.exe

Today, false processes svchost.exe are much less common than in the days of Windows XP, Vista and 7. Virus writers can disguise their malicious programs as it, replacing in the process name, for example, the letter “o” with a zero, the letter “t” with a one, playing with combinations of replacing Latin with Cyrillic, adding some extra characters to the original version of the name. It may be that svchost.exe itself is a genuine process, but its activity, which loads system resources, is associated with a virus that has entered the system. Viruses masquerading as svchost.exe can load not only the processor, but also the disk and RAM, actively absorb Internet traffic, and periodically disconnect the Internet and local network connections. False svchost.exe processes have other signs of the presence of malware in the system - advertising on websites, opening unsolicited web pages in the browser, changing Windows settings etc. The falsity of svchost.exe may be indicated by the location of the process executable file in a path other than C:\Windows\System32 and C:\Windows\SysWOW64. You can find out the location of the process file in the Windows task manager, in the context menu of each instance of svchost.exe.

In the AnVir Task Manager program, the path to the location of the svchost.exe files is indicated in the “Executable file” table column. In addition, AnVir Task Manager contains a separate column with an indicator of the so-called risk level - the verdict of the program creators, based on behavioral analysis of processes.

AnVir Task Manager works in conjunction with Google’s web service Virustotal.Com, where each active process can be checked directly from the program interface using the “Check on site” context menu option.

The problem with the false svchost.exe process is solved in a universal way for all types of malware - scanning the computer with an antivirus with regularly updated databases and an additional scan using an antivirus utility from another developer (with excellent databases).

Have a great day!

Users of the seventh modification of Windows very often encounter a problem when a certain Windows 7 Svchost.exe process loads the processor. The solution to fix the problem, as it turns out, lies on the surface. However, in order to accurately determine which method to use to correct the situation, you first need to understand what this process and associated service components are, since disabling some of them can provoke not only incorrect operation of the OS, but also the appearance of more unpleasant symptoms (even a blue screen is not excluded).

Svchost: what is this process?

Since problems with increased load by this service are most often observed in Windows 7, and are almost never encountered in systems of later releases, when considering all aspects we will start from the seventh modification.

What kind of component is it that it consumes such an incredible amount of system resources? This is a specialized tool for launching system and user programs, which, according to Microsoft developers, should, in theory, reduce the load on the system when programs and their executable components are launched, for example, those presented in the form of dynamic libraries loaded at the start of the executable component as additional objects into RAM.

To put it in simpler and more understandable terms, in Windows 7 the system itself does not need to run each application as a separate process, since for this only one main component is used, due to which all programs start, being, as it were, tied to it. And the Svchost process is a kind of intermediary bridge between the launched program and the main system component responsible for its start. That is, all starting programs and processes through this component are connected to a single launch service.

Why do I see too many processes of the same name in the Task Manager?

But the main start service is not displayed in the same “Task Manager”. In it you can see just the Svchost processes of the same name, of which in a normal state of inactivity there can be about four, and in the presence of running programs - even more.

Thus, if Svchost loads the processor and memory, Windows 7 simply this moment handles too many active background (system) and user applications. But many of them can be quite resource-intensive (take at least AutoCAD or programs for real-time video processing). In such situations, usually in Windows 7 Svchost loads the processor by 50% (maybe a little more). If peak loads are noticed, when the operating system freezes and stops responding to any user actions, you will have to find out the reasons why this is happening.

Windows 7: Svchost loads the processor at 100%. Why?

As for the reasons themselves, there can be quite a lot of them, and such situations cannot always be provoked by system failures (although, unfortunately, they cannot be avoided).

But let's return to the situation when in Windows 7 Svchost.exe loads the processor too much. The most likely reasons for this phenomenon are the following:

• short-term failures of system processes;
• viral infection;
• problems with the system update service;
• too many or failures of related services and system components;
• incorrect operation of the tunnel adapter;
• problems with the SuperFetch component;
• a large amount of computer garbage.

The list shows only the main aspects, which will be discussed further. And for situations where in Windows 7 Svchost.exe loads the processor, a solution for each specific case will be proposed precisely based on what was the root cause of such an unpleasant situation. But first things first.

Windows 7: Svchost (netsvcs) loads the processor: a solution to quickly reduce the load

Many users quite rightly believe that the simplest way to reduce the load is by ending all Svchost processes in the Task Manager. Yes, indeed, this can be done. But in this case, this is just a temporary measure (and in the presence of viruses, it does not help at all).

The same applies to a regular reboot of the operating system. After the restart, of course, there will be no increased resource consumption, but the process itself in the form of four (at least) executable files will still be present in the Task Manager. This system component loads along with the system automatically, and it is impossible to disable it using standard methods, say, using the startup menu.

Checking the system for viruses

But there are worse situations. Suppose in Windows 7 Svchost loads the processor. What to do if the user sees a dozen and a half lines in the “Task Manager” with a link to the same executable file, and the CPU load reaches its maximum peak values?

Apparently, this is the first sign of a virus attack, since many threats are disguised as just a system process and are capable of simultaneously launching several copies of themselves. This will require manual user intervention by launching some powerful portable utility to deeply scan your computer for viruses.

It is best to use a Dr. scanner. Web CureIt!, but the best option would be to boot from removable media with the Kaspersky Rescue Disk utility recorded on it. This program is the undisputed leader, since it starts even before the OS boots and can identify and neutralize threats that are deeply embedded not only in the operating system, but also in RAM.

You can determine that the selected process is a virus threat using the additional username attribute. There can only be two of them: either NETWORK SERVICE or LOCAL. If the user observes any other description, the conclusion is obvious: this is a virus disguised as the original process. In principle, before using anti-virus utilities, you can use RMB to access the directory where the accompanying process file is located and, if possible, delete it manually.

Troubleshooting system update problems

But viruses are not always the reason why Svchost (netsvcs) loads the processor in Windows 7. Very often this is due to failures of the offline update installer (“Update Center”).

For example, some package was under-downloaded during download. So it turns out that the system service is trying to load it (at the same time the Svchost process corresponding to it is launched), but there is no result. On the other hand, the Update Center itself may, for some reason, not work correctly. It may require a restart.

In this case, the services section (services.msc) is first called, in which you need to find the corresponding component, enter the editing section, stop the service and set its startup type to disabled. After this, the system needs to be rebooted and the service reactivated with an automatic start type.

Disable or stop related services

If none of the suggestions helped, and in Windows 7 Svchost loads the processor, the solution may come down to looking at exactly which processes are associated with the executable file and, if possible, disabling them.

To do this, use the same “Task Manager”, in which, through RMB on each process, you need to look at the corresponding service, go to the main section and temporarily disable all processes, as was shown just above.

Fixing tunnel adapter problems

Not often, but sometimes there can be non-standard situations related to the operation of the so-called It is because of its incorrect operation in Windows 7 that Svchost loads the processor. The solution is to adjust its parameters or even turn it off completely.

To do this, it is best to use the command console, called through the “Run” menu with the cmd command. Next, the lines shown in the image above are written in the console, and after they are executed, a complete reboot is performed computer system.

from garbage

There are more simple problem, but just as intrusive. If in Windows 7 Svchost loads the processor, the solution may have something to do with computer junk, for example, due to the lack of free disk space for the normal functioning of the operating system itself (usually it is recommended to keep about 10% of the total volume free in the system partition ).

To begin with, you can clean the disk with a standard tool by accessing the partition properties through the RMB menu in Explorer. On the other hand, some residual files after uninstalling programs are not deleted in this way. But finding them yourself is quite problematic. Alternatively, you can use special cleaning programs or optimizers (CCleaner, Advanced SystemCare, Glary Utilities or something similar).

SuperFetch problems

Many experts call problems with the SuperFetch service another of the most common situations. To disable it, you can use the methods suggested above by entering the services section, stopping the process and changing the startup type.

However, most often the problem is not even this, but the overflow of the corresponding Prefetch directory, which is located in the root of the system. It is because of this that Svchost loads the processor in Windows 7. The solution is the simplest: delete the directory yourself, end all Svchost.exe processes in the Task Manager and reboot. After the restart, there is no need to reactivate the disabled service. Most users, in general, do not need it at all, and among other things, it is quite “voracious” in terms of consumption of system resources, which leads to dire consequences on weak computer configurations.

If in the “Task Manager” you observe the activation of a process with the name of the executable file wuauclt.exe, you need to find the SoftwareDistribution directory (the root directory of the OS) and delete all subfolders and files from it, and then, as usual, restart the computer. You can also rename the original directory itself, giving it a name with the addition “.old” and reboot immediately, even without deleting it.

Brief summary

That's all regarding the main reasons for the appearance of increased loads on the central processor and RAM, as well as the main methods for eliminating them. True, in a certain sense, it is very difficult to say immediately what provoked such a phenomenon. This can be done with confidence only in case of a virus infection or in the case when even manual checking of updates or their installation does not work in the Update Center. In all other situations, you will have to perform each action separately. Apart from possible failures or damage to the hardware (in particular, this applies to RAM strips), at least one technique will give a positive effect in any case.

Just in case, many experts recommend clearing the system event log, which stores LOG files. It can be called through the “Run” console using the eventvwr line, after which use the cleanup items for the application, system, security and installation sections via RMB. After completing all actions, the system must be rebooted.

If the proposed methods do not work for some reason, identical actions can be performed in Safe Mode by pressing F8 at startup.

Beginning with Windows versions XP, one very unusual service appeared in the operating systems of this family - Svchost.exe (netsvcs). In its original version, it was mainly responsible for network connections, but over time it began to be used more widely. It's no secret that it is the Svchost.exe (netsvcs) process that loads the processor (Windows 7). How to fix the problem and disable unnecessary components will now be shown. But first, let's figure out what this process is and why it is needed.

Service Svchost.exe (netsvcs): what is this process?

Let's take Windows 7 as a basis, since in systems of a higher rank the problem with this service is not so pronounced.

It was from the seventh modification of Windows that the developers decided to make the system faster, using for this, as they believed, a universal solution, the essence of which was to not call the executable file of some system or user process, but to launch it through one service in background mode.

How the service works

If you look at the list of processes in the Task Manager, you can see several Svchost.exe services (netsvcs). What this is and why this happens will become clear if you understand the basic principles of operation of this component.

In general, processes may contain four (minimum) or more such components, but they all belong to the same group (netsvcs). The working principle of the process is to run system processes through special svc hosts using the Services.exe tool. In this case, the accompanying components of any program (for example, dynamic libraries DLLs, which are not accepted for execution by the system in the usual way) are loaded into RAM. It is believed that this allows you to speed up the start of executable applications (including user ones).

Why does the process load RAM and virtual memory?

But why then does the Svchost.exe (netsvcs) process load Windows 7 memory? The decision to eliminate such a problem will have to be made based on the reasons for such system behavior. Among them, the main ones are the following:

• exposure to viruses masquerading as Svchost.exe processes;
• malfunctions in the Windows update search and installation tool;
• accumulation of computer garbage while surfing the Internet;
• problems with tunnel adapter;
• Prefetch service enabled.

It is worth noting that the Svchost.exe (netsvcs) process loads physical memory (RAM and virtual, which uses the space reserved on the hard drive to load program components when there is insufficient RAM).

In the simplest case, you can get rid of excessive load by simply restarting the system. But this gives only a short-term effect, as does terminating each process in the same “Task Manager”. Therefore, drastic measures will have to be used.

Check for viruses and malicious codes

First of all, you need to determine the presence of viruses masquerading as Svchost.exe (netsvcs) processes in the system, using their attributes in the “Task Manager”. On running services with a user name, the process description can only contain the attributes Network Service, Local Service or System. If something else is specified (most often Admin), you need to start checking immediately.

In the simplest version, you can use a standard scanner, but in most cases this does not give any results (after all, apparently, the antivirus has already missed the threat). Most experts recommend using independent utilities, among which one of the most powerful is Rescue Disk from Kaspersky Lab. The antivirus can be loaded from a disk or flash drive even before Windows starts, and at the same time it is capable of finding viruses, even those that are very deeply integrated into the system.

Svchost.exe (netsvcs) uses up memory in Windows 7. Solution - system update service

Many experts call problems with the Update Center another common problem. It happens that Svchost.exe (netsvcs) loads the processor (Windows 7) for no apparent reason (as it seems). But there is a reason. The problem is that some updates may have been underloaded, so the system tries to download and install them again and again.

Disabling the search and installation of updates through the Update Center, called from the Control Panel, may not work (even if you set the automatic search mode and offer installation at the user’s discretion). In this case it is best to use command line, launched as an administrator, in which three commands are written, followed by pressing the enter key after each of them (for any version of Windows):

• to stop the service - net stop wuauserv;
• to disable background smart transmission - net stop bits;
• to deactivate delivery optimization - net stop bits.

Terminating related processes

Now let's look at another option for deactivating Svchost.exe processes (netsvcs). How do I disable service-related components? First, you should find out which processes are “attached” to it and are called when the system starts, but are not in the automatic boot menu.

To do this, in the “Task Manager” you need to find all the searched lines containing Svchost.exe (netsvcs), sorting the processes in alphabetical order.

On the selected process, through the right-click menu, you need to go to services using the corresponding line.

Each service can be stopped right here or open the service management section (this can also be done through the program launch menu “Run” (Win + R), where the command services.msc is entered. But this option is somewhat inconvenient only because you have to remember the name of each service, and then look for it in the service tree.

Next, by double-clicking, the settings menu is called up, where the service is either stopped with the corresponding button, or it is assigned a different startup priority or complete shutdown. But you shouldn’t overdo it, because this can disable important system processes, which can negatively affect the operation of the entire OS (up to a failure, after which you will have to restore or so-called rollback to a previous working state).

Removing computer junk and registry optimization

In some cases, the load on the system from the Svchost.exe (netsvcs) processes may be associated with simple clogging with computer garbage.

Carrying out cleaning on your own is a very troublesome task, so to simplify the work you should use optimizers like CCleaner, Glary Utilities, Advanced SystemCare, in which for scanning you need to select not only deleting temporary files or clearing the cache, but also enable searching for problems in the system registry and then correcting or deleting incorrect keys and even defragmentation.

Troubleshooting tunnel adapter problems

Infrequently, there is a problem with the Teredo tunnel adapter. At the same time, even some of its controls may simply freeze. The way out of this situation is to disable the corresponding protocol (especially if it is enabled by default but not used).

To deactivate it, you need to run the command line with administrator rights and enter two commands: netsh interface ipv6 set teredo disable and netsh interface teredo set state disable, and after executing them, reboot the computer terminal.

Checking the status of the SuperFetch service

Finally, another global problem, although partially related to Svchost processes, is the activated service for remembering frequently used programs and applications to optimize or speed up their launch, which is called SuperFetch.

You can disable this component through the service management section (services.msc) by selecting the desired startup type, or perform similar actions in the system registry, which is not very convenient.

But it is believed that the simplest method of reducing the load on system resources in relation to this particular service is to delete the Prefetch folder, which is located in the Windows root directory in the system partition. After this, you can terminate all Svchost processes in the standard Task Manager and perform a full restart of Windows.

Results

What can be said about the processes considered if we sum up some results and draw conclusions? Among the main reasons causing increased use of system resources, and especially in Windows 7, the main ones are problems with the impact of viruses, failures in the update service and the SuperFetch service. But this situation in most cases occurs on low-power computers that are too weak to simultaneously support startup optimization large quantity resource-intensive programs. And, what’s most interesting, most often it’s not the processor that takes the brunt of the blow, but RAM, the use of which in some cases can reach one hundred percent. The lack of RAM capacity leads to the fact that the system begins to actively use virtual memory (hard disk space), which leads to a significant slowdown when accessing the hard drive.

As for solving this problem, you should use each of the above methods. But you will have to be extremely careful not to complete any systemic important process(although in this case a spontaneous reboot with recovery may simply follow). But the SuperFetch component should not be disabled on modern machines with large amounts of RAM and powerful processors. This solution is applicable only in the case of outdated computer equipment.

Most users have encountered the problem freezing And braking computer. First of all, everyone opens " Task Manager"and often see that everything is to blame process svchost.exe. It greatly complicates the work of the processor and memory, sometimes to the point that it is impossible to work on the computer. Let's figure out what this process is.

Svchost is one of main processes to start Windows OS services stored in DLLs. The processes that appear in the list are loaded by svchost. It is an integral part of Windows.

To reduce the load on the processor, the creators of different services decided to use one process, giving it versatility.

Now there can be three or more processes, each of them is responsible for specific service. This is why svchost.exe drains memory and CPU resources.

Why can a service load the system?

There are 5 reasons why svchost can load the system:

• System failure. This is a common occurrence in OS.
• Virus, a process disguised as a host is a fairly common problem. Hackers who create virus applications use the name of this process. Because a virus called svchost is difficult to detect as a malignant application, even if it loads the system and memory.
• Problem while working with the module auto updates Windows. Interruptions in Windows auto-update can cause errors with svchost. Sometimes it happens that some updates contain errors and bugs, this causes difficulties in the operation of the OS and, accordingly, in svchost.
• Huge log file size in the OS incident log. This problem may also affect svchost.
• Overheat inside the system unit, external damage to the memory chip. This problem It is rare, but it should not be excluded.

How to calculate a virus

There are several viruses that masquerade as svchost.

Signs infections can be varied:

Note! The svchost.exe file can be located in the folders WinSxS, ServicePackFiles,Prefetch;

• The svchost process on behalf of the user is enabled only on Windows 10. In other versions it should only be launched on behalf of the System, « LOCAL SERVICE», « Network Service»;
• the Internet works for several minutes after launch, and then the pages in the browser stop loading and Internet disappears;
• Standard indications for viruses: a lot of advertising, changes in system settings, computer freezing.

Methods for solving the problem

To solve problems you can use following methods:

On the left there will be an item “ Settings" Then we find " Important updates», « Don't check availability of updates (not recommended)" click OK.

• System rollback. You can roll back the system a couple of days ago.
• Clean up your computer using programs to remove unnecessary files.
• Check for damage to memory chips.
• Disconnect the internet cable. If everything goes well, scan for viruses.
• A very risky way, the system can get damaged. Open Conductor. C:\WINDOWS\Prefetch. Necessary get rid of from this folder. After open dispatcher and terminate the restarted process svchost. After reboot system.