PC Pitstop is the undisputed leader in PC diagnostics. Our running process library is culled from our database of over 100 million PC diagnostics and scans.

Tip from the PitCrew

Every process running on your computer takes up CPU cycles and valuable memory. For optimal PC performance and resource utilization, you should be aware of every process on your computer. PC Pitstop designed this process library to help you know which processes are worthwhile and others that slow system performance.

Furthermore, perhaps the quickest and most straight forward method to detect malware is through a running process analysis.

Process Library

  

More than one possible match was found; all matches are listed below in order of their prevalence. This only tells you what the file and the correct action might be.

To understand which possibility is actually running on your own system, perform an Overdrive test and then look at the Software|Processes tab.


Match #1

svchost.exe (Service host process)

Percentage of recently scanned PC's with this process running: 99.00%
Average CPU use for this program: 0%
Average RAM for this program: 10 MB


PC Pitstop Analysis

svchost.exe, in Windows 2000/XP/Vista, is used as a task that runs many different Microsoft-written services. Most of these services are necessary to Windows operation. To control individual services, click Start | Programs | Administrative Tools | Services. To see what services are supported by svchost.exe, open a command prompt and type "Tasklist /SVC".


Recommendation

Win Patrol

svchost.exe is an essential part of Windows and required for Windows to work properly. It should never be disabled.

PC Pitstop recommends WinPatrol Plus for monitoring all of the background activity on your PC. WinPatrol Plus provides a easy to understand descriptions of over 15,000 processes and programs.



Identification

In addition to the file name, svchost.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor contains:Microsoft Corporation
Product contains:Windows

To view version information with Windows Explorer, right-click the file and click Properties, Version.


MD5 Hashes

MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called svchost.exe, we have detected more than 20 different MD5 hashes. Click on a hash to research the hash in Google.
MD5 Report Summary
Program NameMD5 Count
svchost.exe> 20
#MD5Size
10x4f1562641b9841832f1d5204ed7d955b12800 bytes
20xc562e2226db032a671cb8cda804e29dc19968 bytes
30xa2509122056155cd16ed5fccbce7b339514048 bytes
40xc6c4944f34db73cf4e6410ec5cca0bfd48644 bytes
50xe068d45bcdde8b0fc11db9edca6ae637684544 bytes
60x9c1ed6c987f0dc97e3b6c6e6babbae851005056 bytes
70xca5c28947506704392b27a391e8b2c3612288 bytes
80xac098b36f782b5c2b05a774a2989029014336 bytes
90x66ff877c185c300a1db6a1a5f67c8c8914848 bytes
100xeb7c26c10b7274a62a79b65618a2872612288 bytes
110x6d95ab34ad45352bf2193400d356b5db14482 bytes
120xc9433b9c177fb8bd15746c8cdd2e4e7a45056 bytes
130x5f802f806257da332c2fdf3ad251f91f21504 bytes
140x80d6dc610f5a760bc5ca8c4afad7fb8a14848 bytes
150xd8146cc608298075cd0719bfe8174a0a17408 bytes
160xfd66c7b4c98a06940fc60d2cd1f4e94d21504 bytes
170xa08f3b74a44279644e3e5db50849113119728 bytes
180xab3715b267e59cfcef2b9d3e6a80e356250880 bytes
190xdc662a16194c3edc91a347c7b467188629456 bytes
200x86b41580b0bbb8ccdc55f5e8b923117022528 bytes

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. svchost.exe (Service host process) has been seen on 99.00% of systems tested at PC Pitstop. As a point of comparison, it is rare for a particular malicious program (virus or spyware) to be seen on more than one or two percent of all systems tested. The average RAM memory usage for this process was 10 MB. The average CPU load for this program was 0%.


Vendor or Distributor's Web Site

http://support.microsoft.com/default.aspx?scid=KB;en-us;q314056


Match #2

svchost.exe (svchost trojan/virus)

Percentage of recently scanned PC's with this process running: 0.08%
Average CPU use for this program: 0%
Average RAM for this program: 6 MB


PC Pitstop Analysis

svchost.exe is a file name used by many malwares, look into Site URL.
In Windows 2000 and XP, svchost is used as a task that runs many different Microsoft-written services. Most of these services are necessary to Windows operation.
To control individual services, click Start | Programs | Administrative Tools | Services. To see what services are supported by svchost.exe, open a command prompt and type "Tasklist /SVC".
However USUALLY svchost.exe has in Vendor field "Microsoft" just like Product has "windows", was detected that this file has no vendor or product information which makes it just suspicious.
Was found a virus/trojan with the same name, run a virus scan to be sure that is not the case.


Recommendation

CA AntiVirus

svchost.exe is a VIRUS. Stop all work until the virus is removed or you run the risk of spreading the virus to other people. Worse yet, the virus may be doing harm to your computer and your information.

svchost.exe is a virus and should be removed immediately to avoid doing further harm. PC Pitstop recommends CA Antivirus in these types of situations.



Identification

The file name alone identifies this program.


MD5 Hashes

MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called svchost.exe, we have detected more than 20 different MD5 hashes. Click on a hash to research the hash in Google.
MD5 Report Summary
Program NameMD5 Count
svchost.exe> 20
#MD5Size
10x69c28f7553329c891b130c74710ae2ed233472 bytes
20xc5924e438e2bcf6c5be121f108153907233472 bytes
30xd3980fc915174e30cd21768ceecd22e636864 bytes
40xd1da9a80bbee37bfc577a0f5eb3f722440960 bytes
50x153b99506ac058bab85d16c87d4c743b512000 bytes
60x1a7bcd7dcf397cd9a065795b2c7d7538636416 bytes
70xaeeca19a6deacbc2b4a684beb34508df32768 bytes
80x7b176a3463ef95347b54934dc51c8990161792 bytes
90x92713025e11d75f85ffffc5adb5409c61884160 bytes
100x55113172e9efed8be0bb467c9148cb8422528 bytes
110x98dee130e5e5ed9a25204bc80702868013308 bytes
120x00efc45577a3dacf71565a0bc3c0726d1998848 bytes
130x7cd56cf4952449efd22a7ea88677faa365536 bytes
140xa77f7091642fd4247b1ed10cee4747b2227328 bytes
150x3f0a919f76f0940046dd1d85345d25fc21504 bytes
160xbc0d0b57e90e4f57205af11bfb32a41f471040 bytes
170x3e1b684e65c2254715f4e48f180d1e0161511 bytes
180x4a1a02d3b80ae5919506d20b12829a81278565 bytes
190x19b5e1b75887d949494dd1c567c11b79106496 bytes
200x20b7b6e0739dc05849e4e5729e9830b610236 bytes

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. svchost.exe (svchost trojan/virus) has been seen on 0.08% of systems tested at PC Pitstop. As a point of comparison, it is rare for a particular malicious program (virus or spyware) to be seen on more than one or two percent of all systems tested. The average RAM memory usage for this process was 6 MB. The average CPU load for this program was 0%.


Vendor or Distributor's Web Site

http://search.ca.com/search/ca?style=en&search_button=Search&qt=svchost.exe&col=


Match #3

svchost.exe (svchost trojan/virus)

This program has not been seen on any systems tested at PC Pitstop in the past week.


PC Pitstop Analysis

svchost.exe is a file name used by many malwares, look into Site URL.
In Windows 2000 and XP, svchost is used as a task that runs many different Microsoft-written services. Most of these services are necessary to Windows operation.
To control individual services, click Start | Programs | Administrative Tools | Services. To see what services are supported by svchost.exe, open a command prompt and type "Tasklist /SVC".
However USUALLY svchost.exe has in Vendor field "Microsoft" just like Product has "windows", was detected that this file has no vendor or product information which makes it just suspicious.
Was found a virus/trojan with the same name, run a virus scan to be sure that is not the case.


Recommendation

CA AntiVirus

svchost.exe is a VIRUS. Stop all work until the virus is removed or you run the risk of spreading the virus to other people. Worse yet, the virus may be doing harm to your computer and your information.

svchost.exe is a virus and should be removed immediately to avoid doing further harm. PC Pitstop recommends CA Antivirus in these types of situations.



Identification

In addition to the file name, svchost.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor is not specified
Product is not specified
File name contains:\program files\

To view version information with Windows Explorer, right-click the file and click Properties, Version.


MD5 Hashes

MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called svchost.exe, we have detected more than 20 different MD5 hashes. Click on a hash to research the hash in Google.
MD5 Report Summary
Program NameMD5 Count
svchost.exe> 20
#MD5Size
10xb290fc3d0cc6178f879fc54b4846da1433280 bytes
20x3a46313f2881f5b6c68cbef112f4ef1322016 bytes
30xf17fcf651556d3d6faadc15b6cd0509822016 bytes
40xc3d300a013f167c99b759591baea9fc822016 bytes
50xa7dfd7f470aa9aa7ebab01ce6adb8b4c56075 bytes
60x1fe94730d7ce598e8c1d0a55f0ad683322608 bytes
70x98a77ec76d0ecfb8b04329e274832bf029184 bytes
80x52df6c8ea0af598c6b977863179ecd1e22016 bytes
90x3467e883f75e8365d2bfbe0b9a41690222016 bytes
100x7f790eff5c40de2097de6f6c56d09ace202240 bytes
110x4e09afb4eec7906083b58e060aa01a4f22016 bytes
120xf9cfd39d74c25b8263651470be91bee4438784 bytes
130xcfdffa2f07256f31a1563f05ef21326522016 bytes
140xfd02ea6827ec9e6fafa41165bf0f0605265583 bytes
150x4c6a0c58d414d4b174653e6dfc14e91f119320 bytes
160x8c437a8b92d9e781b438721f51dc7ce229184 bytes
170x173a060ed791e620c2ec84d7b360ed6034816 bytes
180xb3b4a4de770976c004d66d3b6599cdb840960 bytes
190xd52e31bf7c1ff0184dd38d7b405921f934816 bytes
200x4e1db48a4108cb45438cd6be3d5ba87722016 bytes

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. This program has not been seen on any systems tested at PC Pitstop in the past week.


Detailed Description and/or Removal Instructions

http://search.ca.com/search/ca?style=en&search_button=Search&qt=svchost.exe&col=


Match #4

svchost.exe (svchost trojan/virus)

This program has not been seen on any systems tested at PC Pitstop in the past week.


PC Pitstop Analysis

svchost.exe is a file name used by many malwares, look into Site URL.
In Windows 2000 and XP, svchost is used as a task that runs many different Microsoft-written services. Most of these services are necessary to Windows operation.
To control individual services, click Start | Programs | Administrative Tools | Services. To see what services are supported by svchost.exe, open a command prompt and type "Tasklist /SVC".
However svchost.exe has in Vendor field "Microsoft" just like Product has "windows", was detected that this file has no vendor or product information.
Was found a virus/trojan with the same name, run a virus scan to be sure that is not the case.


Recommendation

CA AntiVirus

svchost.exe is a VIRUS. Stop all work until the virus is removed or you run the risk of spreading the virus to other people. Worse yet, the virus may be doing harm to your computer and your information.

svchost.exe is a virus and should be removed immediately to avoid doing further harm. PC Pitstop recommends CA Antivirus in these types of situations.



Identification

In addition to the file name, svchost.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor is not specified
Product contains:kill

To view version information with Windows Explorer, right-click the file and click Properties, Version.


MD5 Hashes

MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called svchost.exe, we have detected 5 different MD5 hashes. Click on a hash to research the hash in Google.
MD5 Report Summary
Program NameMD5 Count
svchost.exe5
#MD5Size
10x4d6355a1df9b391aa3340946b22545b745056 bytes
20x47a73919a9f65f71068f2160796b151945056 bytes
30x157ed3f5410349bc1ef971db3400370573728 bytes
40xccc2925295bc6bc9e909a6be782d955865536 bytes
50x138e5cb1651f4ff4374c69d08e173a9645056 bytes

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. This program has not been seen on any systems tested at PC Pitstop in the past week.


Detailed Description and/or Removal Instructions

http://search.ca.com/search/ca?style=en&search_button=Search&qt=svchost.exe&col=


Match #5

svchost.exe (svchost trojan/virus)

This program has not been seen on any systems tested at PC Pitstop in the past week.


PC Pitstop Analysis

svchost.exe is a file name used by many malwares, look into Site URL.
In Windows 2000 and XP, svchost is used as a task that runs many different Microsoft-written services. Most of these services are necessary to Windows operation.
To control individual services, click Start | Programs | Administrative Tools | Services. To see what services are supported by svchost.exe, open a command prompt and type "Tasklist /SVC".
However svchost.exe has in Vendor field "Microsoft" just like Product has "windows", was detected that this file has no vendor or product information.
Was found a virus/trojan with the same name, run a virus scan to be sure that is not the case.


Recommendation

CA AntiVirus

svchost.exe is a VIRUS. Stop all work until the virus is removed or you run the risk of spreading the virus to other people. Worse yet, the virus may be doing harm to your computer and your information.

svchost.exe is a virus and should be removed immediately to avoid doing further harm. PC Pitstop recommends CA Antivirus in these types of situations.



Identification

In addition to the file name, svchost.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor contains:Clickteam
Product is not specified

To view version information with Windows Explorer, right-click the file and click Properties, Version.


MD5 Hashes

MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called svchost.exe, we have detected 1 different MD5 hashes. Click on a hash to research the hash in Google.
MD5 Report Summary
Program NameMD5 Count
svchost.exe1
#MD5Size
10xf450bba88fb3780d170e0eae56d253a61948839 bytes

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. This program has not been seen on any systems tested at PC Pitstop in the past week.


Detailed Description and/or Removal Instructions

http://search.ca.com/search/ca?style=en&search_button=Search&qt=svchost.exe&col=


Match #6

svchost.exe (svchost trojan/virus)

This program has not been seen on any systems tested at PC Pitstop in the past week.


PC Pitstop Analysis

svchost.exe is a file name used by many malwares, look into Site URL.
In Windows 2000 and XP, svchost is used as a task that runs many different Microsoft-written services. Most of these services are necessary to Windows operation.
To control individual services, click Start | Programs | Administrative Tools | Services. To see what services are supported by svchost.exe, open a command prompt and type "Tasklist /SVC".
However USUALLY svchost.exe has in Vendor field "Microsoft" just like Product has "windows", was detected that this file has no vendor or product information which makes it just suspicious.
Was found a virus/trojan with the same name, run a virus scan to be sure that is not the case.


Recommendation

CA AntiVirus

svchost.exe is a VIRUS. Stop all work until the virus is removed or you run the risk of spreading the virus to other people. Worse yet, the virus may be doing harm to your computer and your information.

svchost.exe is a virus and should be removed immediately to avoid doing further harm. PC Pitstop recommends CA Antivirus in these types of situations.



Identification

In addition to the file name, svchost.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor is not specified
Product contains:svchost

To view version information with Windows Explorer, right-click the file and click Properties, Version.


MD5 Hashes

MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called svchost.exe, we have detected more than 20 different MD5 hashes. Click on a hash to research the hash in Google.
MD5 Report Summary
Program NameMD5 Count
svchost.exe> 20
#MD5Size
10x0bd2488f8a3c4b2caee223d6f09ea66b208896 bytes
20x83c36d6ba6277bd106fd5922e5b1230a65536 bytes
30x24ad2b26fc2206f1885c079421296a3e18944 bytes
40x38187732f0810f3ac95c3ba35cf49f41208896 bytes
50xe1cda842a3ce9453246362efa8baf8e9556544 bytes
60x8728b4e0cbe22c4e3b73cc68bfa5c28843008 bytes
70x2a1352ee392e4341fd4dc98a4eacee1b480768 bytes
80x1b92e79459fac0b9302afd9ad186a4ea164864 bytes
90xfa2ca319b56d26882433a3cc99e37ba822528 bytes
100xd288cbef79986be0c87f1bab9cb0858f808376 bytes
110xf79a152effd2bd26378d23a8ff5863ca319960 bytes
120x88ec0f2bc7aade2a0ce6b5d3115c29b822528 bytes
130xc47f95eb685d1b9e4a4fa4684b789fa9915656 bytes
140xd6361f8ecf2438bca42054d83ed32df4164864 bytes
150x5a2d7579a907654c1a5723e88ce4436740960 bytes
160xcdc8f2626a1a74187e7e584e242a068e212992 bytes
170x8f39b90298bda441c35dd125ce0f963c18432 bytes
180xf6df5e1b1c8de8425902ec8eb19ee6c6114688 bytes
190x4bd947e8da77d301a47495ac40def4ef114688 bytes
200xd7527a0740abe9c6c99d6cc1ff9d04bb114688 bytes

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. This program has not been seen on any systems tested at PC Pitstop in the past week.


Detailed Description and/or Removal Instructions

http://search.ca.com/search/ca?style=en&search_button=Search&qt=svchost.exe&col=


Match #7

svchost.exe (Backdoor.mIRC-based)

This program has not been seen on any systems tested at PC Pitstop in the past week.


PC Pitstop Analysis

svchost.exe is a file name used by many malware. According to CA this file fits in all these categories:

Backdoor: A secret or undocumented means of getting into a computer system, or software that uses such a means to penetrate a system. Some software has a backdoor placed by the programmer to allow them to gain access to troubleshoot or change the program. Software that is classified as a "backdoor" is designed to exploit a vulnerability in a system, and open it to future access by an attacker.

Flooder: A program that overloads a connection by any mechanism, such as fast pinging, causing a DoS attack.

Trojan: Any program with a hidden intent. Trojans are one of the leading causes of breaking into machines. If you pull down a program from a chat room, new group, or even from unsolicited e-mail, then the program is likely trojaned with some subversive purpose. The word Trojan can be used as a verb: To trojan a program is to add subversive functionality to an existing program. For example, a trojaned login program might be programmed to accept a certain password for any user's account that the hacker can use to log back into the system at any time. Rootkits often contain a suite of such trojaned programs.

Worm: A program that propagates itself by attacking other machines and copying itself to them. Both worms and viruses are self-replicating code that travels from machine to machine by various means. Both worms and viruses have, as their first objective, merely propagation. Both can be destructive, depending on what payload, if any, they have been given. But there are some differences: worms may replace files, but do not insert themselves into files. In contrast, viruses insert themselves in files, but do not replace them.


Recommendation

PC Pitstop Exterminate

svchost.exeDISABLE AND REMOVE. Intrusive adware or spyware.

PC Pitstop Exterminate removes svchost.exe and all other forms of malware and spyware. Run a free scan and analysis to learn how to quickly and easily rid your computer of adware and spyware.



Identification

In addition to the file name, svchost.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor contains:Mirc
Product contains:mIRC

To view version information with Windows Explorer, right-click the file and click Properties, Version.


MD5 Hashes

MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called svchost.exe, we have detected 7 different MD5 hashes. Click on a hash to research the hash in Google.
MD5 Report Summary
Program NameMD5 Count
svchost.exe7
#MD5Size
10xde17fd33d67bf6d5fc0abdf31ef67ce446592 bytes
20x3a4c3febd67406051d610262eac330bb46592 bytes
30xcb816645a2954a0ae1ceb6acb2a48a7246592 bytes
40x9496b711d7fbcc05b5bd63756d167d1246592 bytes
50xc1c8937966ba2f136eee1fff6f21842f46592 bytes
60xd26e87190c074b3c9e1b3ceba4b6d03a45568 bytes
70x8ed63993a4b1154a4745bd3e97914d8e1790464 bytes

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. This program has not been seen on any systems tested at PC Pitstop in the past week.


Vendor or Distributor's Web Site

http://search.ca.com/search/ca?style=en&search_button=Search&qt=svchost.exe+mirc&col=

Detailed Description and/or Removal Instructions

http://www.ca.com/securityadvisor/pest/pest.aspx?id=453078035

Important note: A file name alone may not be enough for positive identification. PC Pitstop's Overdrive tests and spyware scan use information such as the company name, product name, or install directory. If you are unable to identify a file, ask about it in our forums after running our full tests.