How to remove an svhost error

The free file information forum can help you determine if svhost.exe is a virus, trojan, spyware, or adware that you can remove, or a file belonging to a Windows system or an application you can trust.

Click to Run a Free Scan for svhost.exe related errors

Svhost.exe file information

The process known as OMkPcIZH9W or Project1 or PauloGloria Citroen SteenBairdAlsatian AnalectsKnowles or aowinerg or cdjkjo n

appears to be part of software Project1 or OMkPcIZH9W or VWebFilter or stub or VHZHkE9W or Windows Update or Kellogg Semiramis Lombard Rushmore Columbia Sudanese Rocco Atwater or hnaerv

by Microsoft (www.microsoft.com) or V0q0H5 or no manufacturer or RichmondBangorCelaneseConner VenusPravdaBostonianSeptember or xda fojdsshz.

Description: svhost.exe is located in the folder C:\Windows\System32. Known file sizes on Windows 7/XP are 27,136 bytes (9% of all occurrences), 1,054,720 bytes and 36 more variants.
File svhost.exe is a file without information about the developer of this file. The file is not a Windows core file. The application starts upon Windows startup (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Runonce, C:\Windows\win.ini, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx, HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders). The program is not visible. Svhost.exe is an unknown file in the Windows folder. svhost.exe is able to monitor applications, record inputs, hide itself and manipulate other programs. Therefore the technical security rating is 86% dangerous, however also read the users reviews.

Recommended: Identify svhost.exe related errors

If svhost.exe is located in the folder C:\Windows, the security rating is 84% dangerous. The file size is 38,400 bytes (26% of all occurrences), 185,856 bytes and 21 more variants. There is no description of the program. The file is not a Windows core file. The program is not visible. The file is an unknown file in the Windows folder. The application starts upon Windows startup (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Runonce, C:\Windows\win.ini, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx, HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders). The program uses ports to connect to a LAN or the Internet. svhost.exe is able to monitor applications, manipulate other programs and record inputs.

If svhost.exe is located in a subfolder of C:\Windows, the security rating is 72% dangerous. The file size is 10,752 bytes (26% of all occurrences), 59,904 bytes and 9 more variants. The application has no file description. The program is not visible. Svhost.exe is not a Windows system file. Svhost.exe is an unknown file in the Windows folder. Program uses ports to connect to a LAN or the Internet. svhost.exe is able to record inputs, manipulate other programs and monitor applications.

If svhost.exe is located in a subfolder of "C:\Documents and Settings", the security rating is 57% dangerous. The file size is 3,057,152 bytes (14% of all occurrences), 5,292,544 bytes and 9 more variants.

If svhost.exe is located in a subfolder of "C:\Program Files", the security rating is 55% dangerous. The file size is 410,624 bytes (25% of all occurrences), 1,756,120 bytes and 5 more variants.

If svhost.exe is located in a subfolder of C:\Windows\System32, the security rating is 78% dangerous. The file size is 544,768 bytes (42% of all occurrences), 1,172,472 bytes, 481,280 bytes, 470,528 bytes or 1,518,080 bytes.

External information from Paul Collins:
There are different files with the same name:

"Microsoft AutoUpdater" definitely not required. Added by the RBOT.QG WORM!
"Microsoft Synchronization Manager" definitely not required. Added by the SDBOT-PY WORM!
"Microsoft Update" definitely not required. Added by the RBOT-PI WORM!
"SVHOST" definitely not required. Added by the MYDOOM.I WORM!
"Windows update config" definitely not required. Added by the SDBOT-PF WORM!

Important: Some malware camouflages itself as svhost.exe, particularly when located in the c:\windows or c:\windows\system32 folder. Therefore, you should check the svhost.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.

Score

User Comments

Virus

It's a network service by Windows
Ape

My laptop locks. I use my task manager and see my cpu usage is up to 100% with svhost at around 99. I use task mgr to shut it down and this takes care of my problem
Les Heinemann

my file is missing how do i reinstall
clayton norris

ya It also a network service of windows
disketmpz

windows process is svChost.exe, not svhost.exe. It's tricky, but you have to watch for the absence of the 'C'

Svhost.exe IS malware.. not to be confused with Svchost.exe or svchost.scr ... tho svchost.scr is malware.. cuz I was fussin at boyfriend tellin him he was wrong.. so yeah.. and its a pain to remove.. i had a program that scanned my pc and found it.. tho couldnt delete it.
courtney

virus/worm/spyware
Narf

Infected
Sean in Texas

Spoof of an essentiall network service. It's a virus.
Chris

It's an infection. It bears a similar name to svchost.exe, which IS a vital program.
Dakota

Ape, you are thinking of svchost. (the other is missing the c)
Zithra

Trojan

svhost.exe in C:\Windows\System folder is definitely a virus. Associated with 66.scr or most any other .scr that gets loaded to the hidden network services folder. This virus has taken control of pc's, cloaked stnetlib.exe virus, activated a: drives, virus autoloads to A: drives or USB drives, all hidden files, LUCKELY as of today March 30th, AVG antivurs updates locate and stop this problem.
djhofup

After killing the process and deleting the file, it kept reappearing in Task Manager. I did a search for "svhost.exe" and did not find any file anymore, but it was still running (according to task manager). The ONLY way i managed to stop it was with Sunbelt Personal Firewall, by enabling Application Behavior Blocking and configuring for svhost.exe to deny: starting, modifying and starting other applications. It's still there I think, but now it';s being kept under control.
mihaela

virus trojan

It is S-V-Host, not S-V-C-Host! SVHOST is known malware! SVCHOST is the generic Windows services host process!! REMOVE SVHOST!
Forge

My experience shows c:\windows\system\svhost.exe generates .scr usually named 01 -86.scr files in system32 folder. They do produce a lot of network traffic similar to conficker.
NM

ran across it myself.use cacls svhost.exe /p guest:N to disable access to the file
AK

It is not to be associated with svchost.exe. Easily found and removed with maleware bytes.
Eddy Murphy (further information)

Trojan. Beware SVHost versus SV-C-Host. If it doesn't have a C, Trojan.
anonymous

my svhost.exe is in C:\win32 and there is only that file(Crashes my pc sometimes/virus)
anonymous

Summary: Average user rating of svhost.exe: based on 29 votes with 22 reviews.

2 users think svhost.exe is essential for Windows or an installed application. 2 users think it's probably harmless. 1 user think it's neither essential nor dangerous. 2 users suspect danger. 22 users think svhost.exe is dangerous and recommend removing it. 2 users doesn't grade svhost.exe ("not sure about it").

Svhost scanner

Security Task Manager shows all running Windows tasks including embedded hidden functions (e.g. keyboard or browser monitoring, autostart entry). A unique security risk rating indicates the likelihood of the process being potential spyware, malware, keylogger or a Trojan.

MalwareBytes detects and removes sleeping spyware, adware, trojans, keyloggers, malware and tracking threats from your hard disk. Ideal supplement to Security Task Manager.

SpeedUpMyPC scans, cleans, repairs and optimizes your computer.

Other processes