What is svchost exe in windows 7. Reasons why svchost exe loads the processor

Sometimes svchost.exe and other EXE system errors can be related to problems in the Windows registry. Several programs can use the svchost.exe file, but when those programs are uninstalled or modified, sometimes "orphaned" (incorrect) EXE registry entries are left behind.

Basically, this means that while the actual path of the file may have changed, its incorrect former location is still recorded in the Windows Registry. When Windows tries to look up these incorrect file references (file locations on your PC), svchost.exe errors can occur. Additionally, a malware infection may have corrupted registry entries associated with Platforms, SDK/DDK. Thus, these corrupt EXE registry entries need to be fixed to fix the problem at the root.

Manually editing the Windows registry to remove invalid svchost.exe keys is not recommended unless you are PC service professional. Mistakes made when editing the registry can render your PC inoperable and cause irreparable damage to your operating system. In fact, even one comma placed in the wrong place can prevent your computer from booting!

Because of this risk, we highly recommend using a trusted registry cleaner such as %%product%% (Developed by Microsoft Gold Certified Partner) to scan and repair any svchost.exe-related registry problems. Using a registry cleaner, you can automate the process of finding corrupted registry entries, missing file references (like the one causing the svchost.exe error), and broken links within the registry. Before each scan, a backup copy is automatically created, allowing you to undo any changes with one click and protecting you from possible damage to your computer. The best part is that eliminating registry errors can dramatically improve system speed and performance.

Warning: Unless you are an experienced PC user, we DO NOT recommend manually editing the Windows Registry. Using Registry Editor incorrectly may cause serious problems that may require you to reinstall Windows. We do not guarantee that problems resulting from incorrect use of Registry Editor can be corrected. You use Registry Editor at your own risk.

Before you manually repair the Windows registry, you need to create a backup by exporting a portion of the registry associated with svchost.exe (eg Platforms, SDK/DDK):

1. Click on the button Begin.
2. Enter " command" V search bar... DON'T CLICK YET ENTER!
3. While holding down the keys CTRL-Shift on your keyboard, press ENTER.
4. A dialog box for access will be displayed.
5. Click Yes.
6. The black box opens with a blinking cursor.
7. Enter " regedit" and press ENTER.
8. In the Registry Editor, select the svchost.exe-related key (eg. Platforms, SDK/DDK) you want to back up.
9. On the menu File select Export.
10. On the list Save to select the folder where you want to save the backup copy of the Platforms, SDK/DDK key.
11. In field File name Enter the name of the backup file, for example "Platforms, SDK/DDK backup".
12. Make sure the field Export range value selected Selected branch.
13. Click Save.
14. The file will be saved with extension .reg.
15. You now have a backup of your svchost.exe-related registry entry.

The following steps for manually editing the registry will not be described in this article, as they are likely to damage your system. If you would like more information about editing the registry manually, please check out the links below.

Starting with the version of Windows XP, one very extraordinary service appeared in operating systems of this family - Svchost.exe (netsvcs). In its original version, it was mainly responsible for network connections, but over time it began to be used more widely. It's no secret that it is the Svchost.exe (netsvcs) process that loads the processor (Windows 7). How to fix the problem and disable unnecessary components will now be shown. But first, let's figure out what this process is and why it is needed.

Service Svchost.exe (netsvcs): what is this process?

Let's take Windows 7 as a basis, since in systems of a higher rank the problem with this service is not so pronounced.

It was from the seventh modification of Windows that the developers decided to make the system faster, using for this, as they believed, a universal solution, the essence of which was to not call the executable file of some system or user process, but to launch it through one service in background mode.

How the service works

If you look at the list of processes in the Task Manager, you can see several Svchost.exe services (netsvcs). What this is and why this happens will become clear if you understand the basic principles of operation of this component.

In general, processes may contain four (minimum) or more such components, but they all belong to the same group (netsvcs). The working principle of the process is to launch system processes through special svc hosts using the Services.exe tool. In this case, the accompanying components of any program (for example, dynamic libraries DLLs, which are not accepted for execution by the system in the usual way) are loaded into RAM. It is believed that this allows you to speed up the start of executable applications (including user ones).

Why does the process load RAM and virtual memory?

But why then does the Svchost.exe (netsvcs) process load Windows 7 memory? The decision to eliminate such a problem will have to be made based on the reasons for such system behavior. Among them, the main ones are the following:

• exposure to viruses masquerading as Svchost.exe processes;
• malfunctions in the Windows update search and installation tool;
• accumulation of computer garbage while surfing the Internet;
• problems with the tunnel adapter;
• Prefetch service enabled.

It is worth noting that the Svchost.exe (netsvcs) process loads physical memory (RAM and virtual, which uses the space reserved on the hard drive to load program components when there is insufficient RAM).

In the simplest case, you can get rid of excessive load by simply restarting the system. But this gives only a short-term effect, as does terminating each process in the same “Task Manager”. Therefore, drastic measures will have to be used.

Check for viruses and malicious codes

First of all, you need to determine the presence of viruses masquerading as Svchost.exe (netsvcs) processes in the system, using their attributes in the “Task Manager”. On running services with a user name, the process description can only contain the attributes Network Service, Local Service or System. If something else is specified (most often Admin), you need to start checking immediately.

In the simplest version, you can use a standard scanner, but in most cases this does not give any results (after all, apparently, the antivirus has already missed the threat). Most experts recommend using independent utilities, among which one of the most powerful is Rescue Disk from Kaspersky Lab. The antivirus can be loaded from a disk or flash drive even before Windows starts, and at the same time it is capable of finding viruses, even those that are very deeply integrated into the system.

Svchost.exe (netsvcs) uses up memory in Windows 7. Solution - system update service

Many experts call problems with the Update Center another common problem. It happens that Svchost.exe (netsvcs) loads the processor (Windows 7) for no apparent reason (as it seems). But there is a reason. The problem is that some updates may have been underloaded, so the system tries to download and install them again and again.

Disabling the search and installation of updates through the Update Center, called from the Control Panel, may not work (even if you set the automatic search mode and offer installation at the user’s discretion). In this case, it is best to use the command line, launched as an administrator, in which three commands are written, followed by pressing the enter key after each of them (for any version of Windows):

• to stop the service - net stop wuauserv;
• to disable background smart transmission - net stop bits;
• to deactivate delivery optimization - net stop bits.

Terminating related processes

Now let's look at another option for deactivating Svchost.exe processes (netsvcs). How do I disable service-related components? First, you should find out which processes are “attached” to it and are called when the system starts, but are not in the automatic boot menu.

To do this, in the “Task Manager” you need to find all the searched lines containing Svchost.exe (netsvcs), sorting the processes in alphabetical order.

On the selected process, through the right-click menu, you need to go to services using the corresponding line.

Each service can be stopped right here or open the service management section (this can also be done through the program launch menu “Run” (Win + R), where the command services.msc is entered. But this option is somewhat inconvenient only because you have to remember the name of each service, and then look for it in the service tree.

Next, by double-clicking, the settings menu is called up, where the service is either stopped with the corresponding button, or it is assigned a different startup priority or complete shutdown. But you shouldn’t overdo it, because this can disable important system processes, which can negatively affect the operation of the entire OS (up to a failure, after which you will have to restore or so-called rollback to a previous working state).

Removing computer junk and registry optimization

In some cases, the load on the system from the Svchost.exe (netsvcs) processes may be associated with simple clogging with computer garbage.

Carrying out cleaning on your own is a very troublesome task, so to simplify the work you should use optimizers like CCleaner, Glary Utilities, Advanced SystemCare, in which for scanning you need to select not only deleting temporary files or clearing the cache, but also enable searching for problems in the system registry and then correcting or deleting incorrect keys and even defragmentation.

Troubleshooting tunnel adapter problems

Infrequently, there is a problem with the Teredo tunnel adapter. At the same time, even some of its controls may simply freeze. The way out of this situation is to disable the corresponding protocol (especially if it is enabled by default but not used).

To deactivate it, you need to run the command line with administrator rights and enter two commands: netsh interface ipv6 set teredo disable and netsh interface teredo set state disable, and after executing them, reboot the computer terminal.

Checking the status of the SuperFetch service

Finally, another global problem, although partially related to Svchost processes, is the activated service for remembering frequently used programs and applications to optimize or speed up their launch, which is called SuperFetch.

You can disable this component through the service management section (services.msc) by selecting the desired startup type, or perform similar actions in the system registry, which is not very convenient.

But it is believed that the simplest method of reducing the load on system resources in relation to this particular service is to delete the Prefetch folder, which is located in the Windows root directory in the system partition. After this, you can terminate all Svchost processes in the standard Task Manager and perform a full restart of Windows.

Results

What can be said about the processes considered if we sum up some results and draw conclusions? Among the main reasons causing increased use of system resources, and especially in Windows 7, the main ones are problems with the impact of viruses, failures in the update service and the SuperFetch service. But this situation in most cases occurs on low-power computers that are too weak to simultaneously support the optimization of running a large number of resource-intensive programs. And, what’s most interesting, most often it’s not the processor that takes the brunt of it, but the RAM, the use of which in some cases can reach one hundred percent. The lack of RAM capacity leads to the fact that the system begins to actively use virtual memory (hard disk space), which leads to a significant slowdown when accessing the hard drive.

As for solving this problem, you should use each of the above methods. But you will have to be extremely careful not to terminate some systemically important process (although in this case a spontaneous reboot with recovery may simply follow). But the SuperFetch component should not be disabled on modern machines with large amounts of RAM and powerful processors. This solution is applicable only in the case of outdated computer equipment.

Anyone who uses different versions of Windows OS in their work is invariably faced with the presence of incomprehensible services in the system, marked as a host process for services; we will now try to understand this using the example of three main processes. Along the way, recommendations will be given to eliminate some problems.

What is a host process?

To begin with, in the broadest sense, a host process defines a specialized intermediate link (platform) responsible for the interaction of a computer system, hardware, programs and their components with the user.

Today there are many such processes, often hidden from the user’s eyes. For the correct operation of any one, a specific host process for Windows services is used. What could this be in the operating system? This is a means of launching programs and applications, both those that are called manually by the user, and those that cannot be launched in the standard way, or that require additional components to be launched.

Without delving into the jungle of the principles of operation of all system processes, we will consider the three most famous and most often used. These services are Svchost, Rundll32 and Taskhost. By the way, it is with them that many problems arise associated with an unreasonably large load on the central processor and RAM.

Svchost.exe service

It is the main system host process for Windows services. What is it, let's see.

Previously, say, back in versions of Windows XP, this service was solely responsible for network connections, but over time it was transformed into a single process, due to which additional components of the “OS” itself or user applications are launched, due to which, in theory, resource consumption should be reduced processor and RAM. In other words, one service is responsible for the simultaneous launch of several programs or their components.

After the system boots, there are at least four such services in the “process tree”. As soon as any other program is launched in the user session, it immediately appears in the “Task Manager” as an active application, and in the process tree as this service, but with a note in the description that it is the user process that is running. Naturally, if problems arise with system resources, it can be terminated or disabled. In some cases it may be a virus, then it is better to use anti-virus software to scan the system.

Windows host process Rundll32.exe

Rundll32 is also a system service, but it is solely responsible for running software components that are represented on the system in the form of 32-bit dynamic components (libraries with the file extension .dll), which in the usual way (such as

Such a process reads the executable program code located in the library and initiates its launch (already as an executable file).

Naturally, failures are also observed here, most often resulting from damage to the Rundll32.exe file itself or its infection with viruses and malicious codes. You can correct this situation with Windows, located on the original installation disk, or again, check the system for threats.

Taskhost.exe process

Now about the Taskhost service. And is it also a host process for services in a broader sense? In fact, it turns out that this service is, as it were, a duplicate of the first two, but is solely responsible for launching applications and programs that differ in the type of executable file, but only with 32-bit architecture.

To put it simply, in the same 64-bit version of the Windows 7 operating system, applications or dynamic libraries (32-bit architecture) are launched using the Taskhost process. As practice shows, it can be disabled painlessly, since applications of this kind can also be called by the services described above. What is noteworthy: such a shutdown will not affect the performance of the system, but will free up some of the used system resources.

In Windows 7, the most important process in the OS is Svchost.exe. Very often, PC users with Windows 7 encounter a problem when this process heavily loads the processor. The load on processor cores can reach from 50 to 100 percent. Svchost.exe is host process responsible for launching group services from DDL dynamic libraries. That is, the system, using this host process, starts a group of services without creating unnecessary processes. This approach reduces the load on the processor and RAM. If the system slows down and Svchost.exe heavily loads the processor, this means that the OS is not working properly. This behavior of the system can be caused by malware, as well as problems in the OS itself. To deal with this problem, in this article we will look at all the ways to solve the problem with high CPU load caused by the Svchost.exe process.

First steps to solve the problem with the Svchost.exe process

If you have a situation where the host process Svchost.exe is heavily loading the processor, then you should not immediately think that it is a virus. In addition to the virus, the OS itself may be the culprit of this problem. Below we will look list of problems, and methods to correct them:

Restoring normal processor operation using an antivirus

If the methods described above did not help, then most likely your Windows 7 infected with a virus. Typically, infection with a virus occurs from the outside. That is, via the Internet or via an external data storage device. If you have a good antivirus, then most likely the virus will not pass through. But there are times when antivirus programs do not see new versions of viruses and skip them. If your computer is infected, then the host process Svchost.exe will load the processor up to 100 percent, and in the user name you will see not the system names “LOCAL” and “NETWORK SERVICE”, but a completely different name.

To get rid of a virus in the system, you need run full scan computer in Windows 7 to search for malware. Below we will look at an example of running a full scan of your computer using the Comodo Internet Security antivirus. Also, before running any antivirus to scan the OS, update its antivirus database. Let's move on and launch the antivirus Comodo Internet Security.

In the main antivirus window, go to the bottom tab “ Scanning", which will open a menu from which you can select scanning options.

In our case, you need to select the item “ Full scan" This option will scan the entire hard drive, identify malicious programs and neutralize them. Below is the Comodo Internet Security scan window.

In other antivirus programs, the principle of launching a full PC scan is as similar as possible to what was discussed. Therefore, if you have a problem with the Svchost.exe host process, then feel free to run a full PC scan.

For this example, we chose the Comodo Internet Security antivirus for a reason. This antivirus has a built-in module called KillSwitch(this module is currently included in the free set of utilities COMODO Cleaning Essentials, which you can download).

This module is a task manager that has advanced functionality. For example, KillSwitch can stop the process tree and revert the changes made after that.

Also a feature of KillSwitch is checking running processes for trust. That is, if the process is untrusted, KillSwitch will find it and indicate this in the third column " Grade" This feature of the KillSwitch module will help you quickly identify problems related to Svchost.exe and CPU load.

It is also worth mentioning when a virus infects the antivirus itself or reliably disguises itself from it, as a result of which the installed antivirus does not see it. In this situation, a boot disk will come to the user’s aid. This disk is a portable Linux-based operating system that boots from it. After booting from this disk, the user will be able to run a PC scan directly from the loaded operating system.

Such a scan should find and neutralize viruses that cause Svchost.exe to load processor cores. Most known viruses The ones that load the CPU with Svchost.exe are:

• « Virus.Win32.Hidrag.d" - is a virus written in C++. Once in the system, he replaces Svchost.exe. After that, it looks for files with the extension “*exe” and infects them. The virus is harmless; it does not harm the system and does not steal information. But constant infection of files with the “*exe” extension greatly loads the processor.
• « Net-Worm.Win32.Welchia.a" - this virus is Internet worm that loads the processor through Internet attacks.
• « Trojan-Clicker.Win32.Delf.cn» - a primitive Trojan that registers a new process Svchost.exe in the system to open a specific page in the browser, thereby loading the system.
• « Trojan.Carberp» - a dangerous Trojan that also disguises itself as Svchost.exe. The main purpose of this virus is search and theft of information from large retail chains.

High CPU usage due to Windows Update

On computers running Windows 7, there is often a situation where the Svchost.exe process loads the processor and memory because of the update center. To check what exactly the update center is loading up the memory and processor, you need to go to “ Task Manager" and use Svchost.exe to navigate to the services that it currently manages. An example of such a transition is shown in the image below.

After such a transition, a window with services should open, where the service “ wuauserv».

It is this service responsible for downloading and installing updates by seven. Fixing this problem is quite simple.

In the Task Manager Services window, you can completely stop “wuauserv” or disable checking for updates in the Control Panel.

But disabling the “wuauserv” service is an ugly way out of this situation.

When this service is disabled, the security of the OS as a whole is compromised, since installation of updates through the update center will be disabled.

You can solve this problem by installing updates manually. In order not to download dozens of updates from the website www.microsoft.com and then take a long time to install them, it is best to use a set of updates UpdatePack7R2. The developer of this set is " simplex", who is also known by this nickname and is a moderator on the www.oszone.net forum. You can download this set from the website http://update7.simplix.info. The latest version is currently available on the website, numbered 12/17/15. After downloading the set, you can begin installing updates. To do this, let's run the installer.

In the window that appears, click the Install button. After this, the update installation process will begin.

This process can take quite a long time and depends on the number of updates already installed. You can update Windows 7 offline in this way all the time, since the author of the project is constantly releasing new sets. You can also restart the update center after the update installation is complete. The memory and CPU usage issue should go away this time as these updates contain a fix.

Other ways to solve the problem with CPU load due to Svchost.exe

In this section, we will describe methods that in some cases help solve the problem with Svchost.exe, and also increase the overall performance and stability of the system. Below is a list with a detailed description of each method:

• Very often it helps to solve the problem of the Svchost.exe process, even when it is infected with a virus, the usual OS rollback using a restore point. But this method can only be used if system protection is enabled.
• When using various installed programs for a long time, the Windows 7 operating system accumulates a lot of garbage on the hard drive. Garbage refers to temporary files created when using various utilities. For example, browser history files. In this case, they will come to the rescue special utilities for cleaning the OS. The most popular among them is the program CCleaner.
• We also recommend defragmentation, which can improve overall system performance. Defragmentation, although it will not solve the problem with the Svchost.exe process, will significantly speed it up, thereby reducing the load on the processor. One of the best defragmenters is the utility Defraggler, which, in addition to its main function, can also defragment system files.
• Cleaning the registry also helps solve our problem. To clean the registry, as in the method above, use the utility CCleaner which is fast will delete old registry keys, preventing Svchost.exe from working correctly.
• Also, for all running processes, including Svchost.exe, working memory is an important factor. At faulty memory The system and running processes may behave unstable. The way out of this situation would be replacing RAM with working memory. You can check your memory for serviceability using the built-in diagnostic tool in Windows 7.

Conclusion

In this article, we covered quite extensively the problem associated with high CPU usage due to the Svchost.exe process. Based on this, our readers will certainly be able to solve this problem and ensure normal operation of the computer.

Video on the topic

• Are you tired of the huge number of pop-up messages about the svchost.exe service error and annoying notifications about the interruption of other services due to an error in the svchost.exe application.
• You have stopped the svchost.exe application error from appearing by ending all svchost services. After this, your system does not respond.
• You saw some strange svchost application processes in the list of processes and disabled them completely. The Windows system stopped working in this mode.
• You were surprised by the appearance of a system message: “Generic Host Process for Win32 Services - an error has been detected. The application will be closed. We apologize for the inconvenience." And it seems to you that something is wrong.
• Error message "Svchost.exe - Application Error: The instruction at address "0x745f2780" accessed memory at address "0x00000000". The memory cannot be "read"" interferes with your normal computer operation until you restart your PC.

Congratulations! You are on the right track in the fight against the svchost.exe application error! You can use the instructions below to resolve the svchost.exe application error.

QUICK FIX for Svchost.exe application error

1. Make sure that there are no viruses or spyware on your computer - download an anti-virus program. Immediately after scanning for viruses and spyware, you will find out that the svchost application error did not appear due to viruses, or the svchost virus has entered your computer. In the first case, proceed to the second step. In the second case, relax because SpyHunter has already eliminated all malware on your computer, including the source of the svchost.exe application error.


2. It's even easier. Download the Svchost Error Elimination Utility and it will solve all your problems related to svchost.exe application errors.

Where does the svchost.exe application error start?

Because the svchost.exe application error prevents the computer from booting normally and the operation of many essential services, including RPC (Remote Procedure Call). Due to a bug in the svchost.exe application, DLL files are unable to efficiently contain and distribute Win32 services without using excessive CPU resources. Some programs stop working when the svchost.exe application error occurs, and after they stop working, the computer needs to be restarted. There are many reasons why the svchost.exe application error appears, but two of them are more common. For example, due to system damage or viral activity, the svchost application error appears on the computer and after that you will no longer be able to distinguish which of the running svchost.exe processes are system ones and which of these processes are virus ones. In addition, corruption and errors in the svchost.exe application often cause the computer to freeze and restart.

Is there another way to get rid of the svchost.exe application error?

Yes, you can find it below.

This is no joke, the svchost.exe application error can seriously damage your operating system. Use our Svchost Troubleshooter for better protection against all types of svchost.exe application errors.

Relax! Solution guaranteed!

If our Utility does not solve your problems related to the svchost.exe application error, we will refund all costs to you.