What is the "svchost.exe" process on Windows 8? Is the "svchost.exe" process a virus? Can I terminate the "svchost.exe" process? Why there are multiple "svchost.exe" processes?

"svchost.exe - Host Process for Windows Services" process is used to launch and host multiple Windows services. Each "svchost.exe" process hosts a group of related services.

On the Processes tab of "Task Manager", multiple "svchost.exe" processes may be listed as:

Image Name   PID User Name        Memory Services

svchost.exe  712 SYSTEM           2,500K DcomLaunch, PlugPlay, Power                 
svchost.exe  832 NETWORK SERVICE  4,348K RpcEptMapper, RpcSs                         
svchost.exe 1004 LOCAL SERVICE    7,240K Audiosrv, Dhcp, eventlog, 
                                             lmhosts, wscsvc   
svchost.exe 1040 SYSTEM          68,216K AudioEndpointBuilder, CscService, 
                                             Netman, PcaSvc, SysMain, 
                                             TrkWks, UmRdpService, UxSms, 
                                             Wlansvc, wudfsvc
svchost.exe 1064  LOCAL SERVICE   4,748K EventSystem, FontCache, netprofm, 
                                             nsi, W32Time, WdiServiceHost                     
svchost.exe 1088 SYSTEM          42,460K Appinfo, BITS, CertPropSvc, 
                                             EapHost, iphlpsvc, LanmanServer, 
                                             ProfSvc, Schedule, SENS, 
                                             SessionEnv, ShellHWDetection, 
                                             Themes, Winmgmt, wuauserv                           
svchost.exe 1200 SYSTEM           1,116K gpsvc                                       
svchost.exe 1620 SYSTEM             928K DiagTrack                                   
svchost.exe 1748 LOCAL SERVICE    9,376K BFE, DPS, MpsSvc                            
svchost.exe 1828 NETWORK SERVICE  5,724K CryptSvc, LanmanWorkstation,
                                             NlaSvc, TermService                                 
svchost.exe 1928 SYSTEM             684K AppHostSvc                                  
svchost.exe 3492 LOCAL SERVICE    2,084K SSDPSRV, upnphost                           
svchost.exe 3668 NETWORK SERVICE  1,424K PolicyAgent                                 
svchost.exe 4936 LOCAL SERVICE    1,356K StiSvc                                      
..

Additional information about "svchost.exe" process:

Command line:
   \Windows\System32\svchost.exe
   
Started by: services.exe

Files used:
   C:\Windows\System32
   ... Others per services
 
Registry keys:
   HKLM\SOFTWARE\Microsoft\COM3
   HKLM\SOFTWARE\Microsoft\Ole
   HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\...
   HKLM\SOFTWARE\Policies
   HKLM\SYSTEM\ControlSet001\Control\...
   HKLM\SYSTEM\ControlSet001\Enum
   HKLM\SYSTEM\ControlSet001\Hardware Profiles
   HKLM\SYSTEM\ControlSet001\services
   HKU\.DEFAULT\Control Panel\International
   ... Others per services

"svchost.exe" processes could be infected by virus. If you see a "svchost.exe" process acting strangely, you can stop all services hosted by this "svchost.exe" process, using Task Manager. Or you can terminate this "svchost.exe" process directly. This will prevent the virus from make additional damages.

Then you should use an anti-virus tool to scan the system and disinfect the virus.

In general, "svchost.exe" processes can be terminated. This may cause some Internect connection and other system feature issue. But Windows 8 system will continue to run.

 

⇒ "ibmpmsvc.exe" Process on Windows 8

⇐ System Service Processes on Windows 8

⇑ System Service Processes on Windows 8

⇑⇑ Windows 8 Processes Tutorials