What is tcpsvcs.exe?

The .exe extension on a filename indicates an executable file. Executable files may, in some cases, harm your computer. Therefore, please read below to decide for yourself whether the tcpsvcs.exe on your computer is a Trojan that you should remove, or whether it is a file belonging to the Windows operating system or to a trusted application.

Click to Run a Free Scan for tcpsvcs.exe related errors

Tcpsvcs.exe file information

Windows Task Manager with tcpsvcs
Tcpsvcs.exe process in Windows Task Manager

The process known as TCP/IP Services Application belongs to software Microsoft Windows Operating System or Microsoft® Windows (version 2000 Operating System) by Microsoft (

Description: The original tcpsvcs.exe from Microsoft is an important part of Windows, but often causes problems. Tcpsvcs.exe is located in the C:\Windows\System32 folder or sometimes in a subfolder of C:\Windows. Known file sizes on Windows 10/8/7/XP are 19,456 bytes (69% of all occurrences), 9,216 bytes and 4 more variants. 
The file is a Windows system file. The program is not visible. The application listens for or sends data on open ports to a LAN or the Internet. The file is a Microsoft signed file. Therefore the technical security rating is 11% dangerous, however you should also read the user reviews.

Uninstalling this variant: You have the option to completely remove HASP License Manager (Control Panel ⇒ Uninstall a Program).

Recommended: Identify tcpsvcs.exe related errors

Viruses with the same file name

Is tcpsvcs.exe a virus? No, it is not. The true tcpsvcs.exe file is a safe Microsoft Windows system process, called "TCP/IP Services Application". However, writers of malware programs, such as viruses, worms, and Trojans deliberately give their processes the same file name to escape detection. Viruses with the same file name are for instance HackTool:Win32/CCProxy (detected by Microsoft), and Cryp_Xin1 (detected by TrendMicro).
To ensure that no rogue tcpsvcs.exe is running on your PC, click here to run a Free Malware Scan.

How to recognize suspicious variants? If tcpsvcs.exe is located in a subfolder of C:\Windows\System32, the security rating is 65% dangerous. The file size is 847,872 bytes (50% of all occurrences) or 552,960 bytes. The program is not visible. The file is an unknown file in the Windows folder. It is not a Windows core file. The application listens for or sends data on open ports to a LAN or the Internet. Tcpsvcs.exe is able to record keyboard and mouse inputs, connect to the Internet, hide itself and manipulate other programs.

Important: Some malware disguises itself as tcpsvcs.exe, particularly when not located in the C:\Windows\System32 folder. Therefore, you should check the tcpsvcs.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.


User Comments

it's for networking
tcpsvcs.exe is a part of Microsoft Windows networking components. This essential system process is initiated when the computer uses special TCP/IP networking services such as DHCP, Simple TCP and print services. This program is important for the stable and secure running of your computer and should not be terminated.
  Frits boelema  
he keeps my processor at 100% at boot time, until i stop this computer runs very slow
It gives me headache .......... eating my processor's valuble time
it keeps my processor running at 100% all time until I stopped
IT Slows my computer down
i have the same problems with tcpsvcs.exe! what should we do?
Once I termintate it, my CPU runs between 0% and 10%, tried to search for the file on my PC and cannot find it, does this mean its spyware?
I'm 100% CPU usage unless I cancel this thing
When it is running, which is not all the time, it will use 70% to 90% of the processor's time. I don't know if it is a misconfiguration or a trojan. Concurrently, with the tcpsvcs.exe issue, the computer's time and date is changing, with occassional weird characters on the display. Updated VCOM virus software scans are negative.
  Rees Morrison,  
How to Stop TCPSVCS 90% or higher CPU Process Go to Control Panel and click on Network Connections. For each Network Connection right on it and go to Properties. Once in Properties, go to the tab called Networking. You may see a list of one or more the following usages: Microsoft TCP/IP, File and Printer Sharing, QoS Scheduler. Uncheck each one and click uninstall, which is located under the list of usages. After the uninstall process, the computer will prompt you to restart. This should solve the problem.
Symantec lists this as part of Trojan Backdoor.Egghead. Installed in Windows\System32 folder.
  FlowrHuntr   (further information)
When this file keeps your CPU runs 100%, isn´t a virus or trojan trouble.You got go to "network connections" and right click your "Local Area Connection" and select "Properties" make sure you have the "General" tab selected, then scroll down until you find "Microsoft TCP/IP version 6" select it and click "Uninstall". Restart system and look task manager again, the TCPSVCS.EXE file will be 0%.
  Sérgio Magno Lopes  
it does not seem to have any value. it pushes my cpu usage to 100% until i end it. it has two processes linked to it, ADVAPI32.dll!CryptVerifySignatureW+0x17 and nvsvc32.exe+0x7800, which i suspect to be the baddies - obviously i could be wrong!
I really don' t know anything about this file but one thing is sure, as some other people has written, it keeps my computer processor working hard, too hard, and I' m not so glad about it.
I have seen programs ranging from worms to spyware to keyloggers take up this name. I have had several of them on my own computer. however,under normal circumstances this program provides basic TCP/IP services. If your computer is slowed down by this process taking all the power you should run a virus scanner and a spyware scanner because I have not known this to happen under normal functionality.
this is _not_ needed for tcp ip services as "boelema" indicated. this is add on tcp/ip services. turn it off. go to control panel then add or remove programs then windows components then networking services. then turn off "simple tcp/ip services" and while your at it turn off all the services in this area. these are not needed to run a networked os. you will still be able to connect to the internet. you will still be able to print. boelema dont post unless you know what your talking about.
  corporate zombia  
This is just more MS bloat. You don't need it unless you need the computer to act as a DHCP server (if Internet Connection Sharing is on, then you need it). This thing handles the "well known" TCP Services: echo (it responds to ping), discard (completely useless), daytime (not very useful), quote (quote of the day - pointless) and chargen (also completely useless). Kill it if you like. Your file and print sharing will still be ok, RPC won't have a heart attack... nothing bad will happen. It's just USELESS FAT.
It's a TCP/IP handler
It opens the following ports on my system (but NOT through WinXP firewall) 7, 9, 13, 17, and 19. If you can connect to 13, it will tell you the current time. Port 17 will give you historical qoutes from people that are currently dead. Port 19 will give you a continuous stream of junk. I'm not exactly sure what ports 7 and 9 do. But it doesn't chew up 90%+ of my CPU.
This is the 2nd time I've had this little bastard file come up and both times has caused problems with my networking. When I terminate the process, things seem to work fine. As far as I can tell it's a piece of spyware that I'm picking up and the only way to get rid of it is to reinstall the operating system. I wish I had better news, but all these so called "tips" as to how to live with this file don't work. But it's dispointing that with all the money we pay to mcafee, webroot, and others, that someone can't figure out how to prevent this file from taking up residency.
cpu hog Microsoft ipv6 (Sergio is correct remove not needed....yet)
you can delete it after you shut it own and when you reboot its right back again. it acts like a virus. i even deleted the prefetch file and it still shows back up. Im determined to rid myself of this thing. Post more later
When this file keeps your CPU runs 100%, isn´t a virus or trojan trouble.You got go to "network connections" and right click your "Local Area Connection" and select "Properties" make sure you have the "General" tab selected, then scroll down until you find "Microsoft TCP/IP version 6" select it and click "Uninstall". Restart system and look task manager again, the TCPSVCS.EXE file will be 0%.
This file is required for TCP/IP. Remove TCP/IP version 6 to reduce CPU usage.
  Loki Fuego   (further information)
It is used for TCP/IP v.6 go in to network adapter properties and uninstall TCP/IP v.6 if it is causing problems
  Fergus Sinnott  
tcpsvcs.exe : Why do people believe that uninstalling the process iss the way to go ? - it shows a complete lack of knowledge about the component-agree with Frits comment - ps , we run DHCP on win 2003 server , it is important for us
  Phillip Ebo  
Our McAfee ePO system reports that this file is tying to engage IRC: Blocked by port blocking rule C:\WINDOWS\system32\tcpsvcs.exe Anti-virus Standard Protection:Prevent IRC communication
  Puss Y. Lover  
Guys ...In XP go to Control Panel, Administrative Tools, Services. Go to Simple TCP/IP Services, double-click on it, and under Startup Type choose Disabled. in Control Panel -- Install applications -- install windows components -- Network Service --- (toggle, disable choice SIMPLE SERVICE TCP/IP)...When you restart win XP, must go without problems....cheers!
  harsh   (further information)
if you have wipe your hard drive clean. it's a ghost that certian gov't agency use to watch what your doing. it starts inferring with internet and can cause your computer to crash. you will be limited as to what you can do. known to operate with (cpscan) (listed as application)
I terminated this process and nothing bad happened. I can still get on the internet just fine.
tcpsvs.exe should be a running service with 0% CPU usage, and about 3.89 meg of memory used. If it is running you CPU at such high % rate, your machine is infected. Get it scanned soon (free, through-the-web scanners are available). Your machine is probably now being used as a server (by hackers)!
To work around this problem, disable the dynamic update feature on the DHCP server. To do this, follow these steps: Click Start, click Run, type dhcpmgmt.msc, and then click OK. In the console tree, right-click the node that corresponds to the DHCP server, and then click Properties. On the DNS tab, click to clear the Enable DNS dynamic updates according to the settings below check box, and then click OK. Restart the DHCP Server service. For example, type the following command at a command prompt, and then press ENTER: Net stop DHCPServer && Net Start DHCPServer
  X0E2003   (further information)

Rating chart

Summary: Average user rating of tcpsvcs.exe: based on 36 votes with 34 user comments. 14 users think tcpsvcs.exe is essential for Windows or an installed application. 3 users think it's probably harmless. 7 users think it's neither essential nor dangerous. 3 users suspect danger. 9 users think tcpsvcs.exe is dangerous and recommend removing it. 4 users don't grade tcpsvcs.exe ("not sure about it").

Do you have additional information?
What do you know about tcpsvcs.exe:
How would you rate it:
Link for more info:
Your Name:

Best practices for resolving tcpsvcs issues

A clean and tidy computer is the key requirement for avoiding problems with tcpsvcs. This means running a scan for malware, cleaning your hard drive using cleanmgr and sfc /scannow, uninstalling programs that you no longer need, checking for Autostart programs (using msconfig) and enabling Windows' Automatic Update. Always remember to perform periodic backups, or at least to set restore points.

Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or, for Windows 8 and later versions, executing the DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.

To help you analyze the tcpsvcs.exe process on your computer, the following programs have proven to be helpful: Security Task Manager displays all running Windows tasks, including embedded hidden processes, such as keyboard and browser monitoring or Autostart entries. A unique security risk rating indicates the likelihood of the process being potential spyware, malware or a Trojan. Malwarebytes Anti-Malware detects and removes sleeping spyware, adware, Trojans, keyloggers, malware and trackers from your hard drive.

Other processes

tcpsvcs.exe [all]