The genuine tcpsvcs.exe file is a software component of Microsoft Windows Operating System by Microsoft Corporation. The Microsoft Windows TCP/IP Services Application, "tcpsvcs.exe", is in "C:\Windows\System32". If "Simple TCP/IP Services" is checked under the Control Panel's "Windows Features" applet, it is active and starts automatically at Windows startup as a separate process, not under "svchost.exe". If the checkbox is cleared and service "simptcp" stopped, (or after reboot), it does not appear in "services.msc" or Task Manager. If active, the "Simple TCP/IP Services" are available as command-line tools for administrative network diagnosis or troubleshooting: Character Generator, Daytime, Discard, Echo, and Quote of the Day. Each of these services is defined as an IETF RFC standard, (available in "tools.ietf.org"). Each is associated with a specific port and invoked via "telnet localhost <port#>". If not needed for testing, "tcpsvcs.exe" should be shut off or these ports stay open, inviting malware exploits. Many users have complained of high CPU consumption by "tcpsvcs.exe" unless it is blocked by a firewall.
TCPSvcs stands for TCP/IP Simple Services Application
The .exe extension on a filename indicates an executable file. Executable files may in some cases harm your computer. Therefore, please read below to decide for yourself whether the tcpsvcs.exe on your computer is a Trojan that you should remove, or whether it is a file belonging to the Windows operating system or to a trusted application.
Since 2005, file.net has helped users better understand and correctly identify Windows processes. Our own analysis, research, and the collective experience of our community provide reliable, easy-to-understand information. Around 10,000 users trust us every day.
Description: Tcpsvcs.exe is an important part of Windows, but often causes problems. Tcpsvcs.exe is located in the C:\Windows\System32 folder or sometimes in a subfolder of C:\Windows.
Known file sizes on Windows 10/11/7 are 10,752 bytes (53% of all occurrences), 9,216 bytes, 19,456 bytes, 10,240 bytes or 21,504 bytes.
The process is the simptcp service. The service supports the following TCP/IP services: Character Generator, Daytime, Discard, Echo, and Quote of the Day.
It is a Windows core system file. The program is not visible. The program uses ports to connect to or from a LAN or the Internet. It is a Microsoft signed file.
Therefore the technical security rating is 7% dangerous, but you should also take into account the user reviews.
Uninstalling this variant:
If problems with tcpsvcs.exe occur, you can also uninstall the associated program (Start > Control Panel > Uninstall a Program > HASP License Manager).
Important: Some malware disguises itself as tcpsvcs.exe, particularly when not located in the C:\Windows\System32 folder. Therefore, you should check the tcpsvcs.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.
Score
User Comments
it's for networking joris
tcpsvcs.exe is a part of Microsoft Windows networking components. This essential system process is initiated when the computer uses special TCP/IP networking services such as DHCP, Simple TCP and print services. This program is important for the stable and secure running of your computer and should not be terminated. Frits boelema
he keeps my processor at 100% at boot time, until i stop this service..my computer runs very slow nicole
It gives me headache .......... eating my processor's valuble time Romesh
it keeps my processor running at 100% all time until I stopped steve
IT Slows my computer down Bill
i have the same problems with tcpsvcs.exe! what should we do? bendix
keylogger dar
Once I termintate it, my CPU runs between 0% and 10%, tried to search for the file on my PC and cannot find it, does this mean its spyware? Tate
I'm 100% CPU usage unless I cancel this thing xyz
When it is running, which is not all the time, it will use 70% to 90% of the processor's time. I don't know if it is a misconfiguration or a trojan. Concurrently, with the tcpsvcs.exe issue, the computer's time and date is changing, with occassional weird characters on the display. Updated VCOM virus software scans are negative. Rees Morrison,
How to Stop TCPSVCS 90% or higher CPU Process Go to Control Panel and click on Network Connections. For each Network Connection right on it and go to Properties. Once in Properties, go to the tab called Networking. You may see a list of one or more the following usages: Microsoft TCP/IP, File and Printer Sharing, QoS Scheduler. Uncheck each one and click uninstall, which is located under the list of usages. After the uninstall process, the computer will prompt you to restart. This should solve the problem. Lenora
Symantec lists this as part of Trojan Backdoor.Egghead. Installed in Windows\System32 folder. FlowrHuntr (further information)
When this file keeps your CPU runs 100%, isn´t a virus or trojan trouble.You got go to "network connections" and right click your "Local Area Connection" and select "Properties" make sure you have the "General" tab selected, then scroll down until you find "Microsoft TCP/IP version 6" select it and click "Uninstall". Restart system and look task manager again, the TCPSVCS.EXE file will be 0%. Sérgio Magno Lopes
it does not seem to have any value. it pushes my cpu usage to 100% until i end it. it has two processes linked to it, ADVAPI32.dll!CryptVerifySignatureW+0x17 and nvsvc32.exe+0x7800, which i suspect to be the baddies - obviously i could be wrong! gg
I really don' t know anything about this file but one thing is sure, as some other people has written, it keeps my computer processor working hard, too hard, and I' m not so glad about it. Mattia
I have seen programs ranging from worms to spyware to keyloggers take up this name. I have had several of them on my own computer. however,under normal circumstances this program provides basic TCP/IP services. If your computer is slowed down by this process taking all the power you should run a virus scanner and a spyware scanner because I have not known this to happen under normal functionality. Jercos
this is _not_ needed for tcp ip services as "boelema" indicated. this is add on tcp/ip services. turn it off. go to control panel then add or remove programs then windows components then networking services. then turn off "simple tcp/ip services" and while your at it turn off all the services in this area. these are not needed to run a networked os. you will still be able to connect to the internet. you will still be able to print. boelema dont post unless you know what your talking about. corporate zombia
This is just more MS bloat. You don't need it unless you need the computer to act as a DHCP server (if Internet Connection Sharing is on, then you need it). This thing handles the "well known" TCP Services: echo (it responds to ping), discard (completely useless), daytime (not very useful), quote (quote of the day - pointless) and chargen (also completely useless). Kill it if you like. Your file and print sharing will still be ok, RPC won't have a heart attack... nothing bad will happen. It's just USELESS FAT. Shawn
It's a TCP/IP handler Mark
It opens the following ports on my system (but NOT through WinXP firewall) 7, 9, 13, 17, and 19. If you can connect to 13, it will tell you the current time. Port 17 will give you historical qoutes from people that are currently dead. Port 19 will give you a continuous stream of junk. I'm not exactly sure what ports 7 and 9 do. But it doesn't chew up 90%+ of my CPU. Josh
This is the 2nd time I've had this little bastard file come up and both times has caused problems with my networking. When I terminate the process, things seem to work fine. As far as I can tell it's a piece of spyware that I'm picking up and the only way to get rid of it is to reinstall the operating system. I wish I had better news, but all these so called "tips" as to how to live with this file don't work. But it's dispointing that with all the money we pay to mcafee, webroot, and others, that someone can't figure out how to prevent this file from taking up residency. Dennis
cpu hog Microsoft ipv6 (Sergio is correct remove not needed....yet) Stone
you can delete it after you shut it own and when you reboot its right back again. it acts like a virus. i even deleted the prefetch file and it still shows back up. Im determined to rid myself of this thing. Post more later Nightbreed999
When this file keeps your CPU runs 100%, isn´t a virus or trojan trouble.You got go to "network connections" and right click your "Local Area Connection" and select "Properties" make sure you have the "General" tab selected, then scroll down until you find "Microsoft TCP/IP version 6" select it and click "Uninstall". Restart system and look task manager again, the TCPSVCS.EXE file will be 0%. nightbreed999
This file is required for TCP/IP. Remove TCP/IP version 6 to reduce CPU usage. Loki Fuego (further information)
It is used for TCP/IP v.6 go in to network adapter properties and uninstall TCP/IP v.6 if it is causing problems Fergus Sinnott
tcpsvcs.exe : Why do people believe that uninstalling the process iss the way to go ? - it shows a complete lack of knowledge about the component-agree with Frits comment - ps , we run DHCP on win 2003 server , it is important for us Phillip Ebo
Our McAfee ePO system reports that this file is tying to engage IRC: Blocked by port blocking rule C:\WINDOWS\system32\tcpsvcs.exe Anti-virus Standard Protection:Prevent IRC communication 10.10.0.69:6667 Puss Y. Lover
Guys ...In XP go to Control Panel, Administrative Tools, Services. Go to Simple TCP/IP Services, double-click on it, and under Startup Type choose Disabled. in Control Panel -- Install applications -- install windows components -- Network Service --- (toggle, disable choice SIMPLE SERVICE TCP/IP)...When you restart win XP, must go without problems....cheers! harsh (further information)
if you have wipe your hard drive clean. it's a ghost that certian gov't agency use to watch what your doing. it starts inferring with internet and can cause your computer to crash. you will be limited as to what you can do. known to operate with (cpscan) (listed as application) angel
I terminated this process and nothing bad happened. I can still get on the internet just fine. Julsey
tcpsvs.exe should be a running service with 0% CPU usage, and about 3.89 meg of memory used. If it is running you CPU at such high % rate, your machine is infected. Get it scanned soon (free, through-the-web scanners are available). Your machine is probably now being used as a server (by hackers)! Cool_Man
To work around this problem, disable the dynamic update feature on the DHCP server. To do this, follow these steps: Click Start, click Run, type dhcpmgmt.msc, and then click OK. In the console tree, right-click the node that corresponds to the DHCP server, and then click Properties. On the DNS tab, click to clear the Enable DNS dynamic updates according to the settings below check box, and then click OK. Restart the DHCP Server service. For example, type the following command at a command prompt, and then press ENTER: Net stop DHCPServer && Net Start DHCPServer X0E2003 (further information)
MalwareBytes detected it as a password stealing trojan. Vince
Show all user comments
Summary: Average user rating of tcpsvcs.exe:
based on 37 votes with 35 user comments.
14 users think tcpsvcs.exe is essential for Windows or an installed application.
3 users think it's probably harmless.
7 users think it's neither essential nor dangerous.
3 users suspect danger.
10 users think tcpsvcs.exe is dangerous and recommend removing it.
4 users don't grade tcpsvcs.exe ("not sure about it").
Best practices for resolving tcpsvcs issues
A clean and tidy computer is the key requirement for avoiding problems with tcpsvcs. This means running a scan for malware, cleaning your hard drive using 1cleanmgr and 2sfc /scannow, 3uninstalling programs that you no longer need, checking for Autostart programs (using 4msconfig) and enabling Windows' 5Automatic Update. Always remember to perform periodic backups, or at least to set restore points.
Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the 6resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or executing the 7DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.
To get your computer running as fast as it did on day one, you can 8reset your PC. Your personal files will remain intact, but any programs you installed will need to be reinstalled.
To help you analyze the tcpsvcs.exe process on your computer, the following programs have proven to be helpful: ASecurity Task Manager displays all running Windows tasks, including embedded hidden processes, such as keyboard and browser monitoring or Autostart entries. A unique security risk rating indicates the likelihood of the process being potential spyware, malware or a Trojan. A good Bantivirus software detects and removes sleeping spyware, adware, Trojans, keyloggers, malware and trackers from your hard drive.
Score
User Comments
joris
Frits boelema
nicole
Romesh
steve
Bill
bendix
dar
Tate
xyz
Rees Morrison,
Lenora
FlowrHuntr (further information)
Sérgio Magno Lopes
gg
Mattia
Jercos
corporate zombia
Shawn
Mark
Josh
Dennis
Stone
Nightbreed999
nightbreed999
Loki Fuego (further information)
Fergus Sinnott
Phillip Ebo
Puss Y. Lover
harsh (further information)
angel
Julsey
Cool_Man
X0E2003 (further information)
Vince
Summary: Average user rating of tcpsvcs.exe: based on 37 votes with 35 user comments. 14 users think tcpsvcs.exe is essential for Windows or an installed application. 3 users think it's probably harmless. 7 users think it's neither essential nor dangerous. 3 users suspect danger. 10 users think tcpsvcs.exe is dangerous and recommend removing it. 4 users don't grade tcpsvcs.exe ("not sure about it").