Want to check which user application or Windows utility initiated a specific instance of svchost.exe process? The svchost is basically a small executable file that resides in system32 folder. It is a generic Windows host process that plays a vital role in keeping all the system and user initiated services stable. Since Task Manager doesn’t provide a detailed information on running instances of svchost executables, you may need Svchost Process Analyzer to analyze the services and applications that run multiple instances of svchost.exe and to identify all the svchost related malwares. It helps you prevent Windows from those malwares and viruses which create a fake svchost.exe file at different locations to exploit user’s access rights; it lists down all the running instances of svchost processes with detailed information, so that you can easily identify malware infected svchost.exe files.

When you launch the application, it starts scanning all the running instances of svchost.exe process. Once the scanning is finished, it shows the number of svchost processes found with total number of potential warnings.

Clicking Details will open the main window, where all the svchost processes are listed with information like process ID, source path, service group and number of services being hosted by each svchost process. When you select a svchost.exe file from the list, it shows all the related services in bottom pane, letting you check the integrity of services. At the top of window, you will find information on selected service of a specified svchost file.

For instance, if you select a DNS client service from the bottom pane, it will show details on the DNS Client at the top to help you better understand the functions of the service. Furthermore, it lets you identify typical (Microsoft services) and atypical services from the list; a green tick icon represents Windows service, whereas the warning sign represents an atypical service. Svchost Process Analyzer works on Windows XP, Windows Vista and Windows 7. Both 32-bit and 64-bit OS editions are supported.

Download Svchost Process Analyzer

More On AddictiveTips Right Now

• Windows 7 Svchost.exe Taking 100% CPU? Analyze & Fix it
• How To Analyze Windows Application Security With UAC Process Analyzer
• Fix svchost.exe Crash Caused By McAfee Or Virus

SvcHost.exe is the most important part of Windows, deleting it would crash your entire operating system. You are probably reading this post because McAfee Antivirus deleted your SvcHost file after false positive detection and you cannot login to your primary system. This was a mistake on the McAfee’s part but most viruses can also delete your SvcHost file. Thankfully we have a solution to fix it.

If you are using Windows XP with Service pack 3 installed then you can type the following and hit Enter.

copy c:\windows\ServicePackFiles\i386\svchost.exe c:\WINDOWS\system32\dllcache

This will copy the svchost.exe file to “c:\WINDOWS\system32\dllcache” folder. If svchost.exe is residing in system32 folder, then only write the path “c:\Windows\system32\” (without the quotes).

Mark van Driel & Maurits van der Schee have created a quick fix tool called SvcHostFix, for users who are stuck. It is a simple command line tool that will automatically copy back the svchost.exe file, thus fixing the problem. The program works like this:

1. IF the file size of c:\windows\system32\svchost.exe is 0 bytes or the file doesn’t exist
2. THEN IF the file size of c:\windows\ServicePackFiles\i386\svchost.exe is 0 bytes or the file doesn’t exist
3. THEN copy that file to c:\windows\system32\svchost.exe
4. ELSE IF the file size of c:\windows\system32\dllcache\svchost.exe is 0 bytes or the file doesn’t exist
5. THEN copy that file to c:\windows\system32\svchost.exe
6. ELSE copy (embedded) Windows XP SP3′s svchost.exe file to c:\windows\system32\svchost.exe

Simple as that! You can grab the tool from the link below. Note that it requires a minimum .NET 2 Framework installed.

Download SvcHostFix

More On AddictiveTips Right Now

• Svchost Process Analyzer: Identify svchost.exe Worms & Analyze All Instances Of The Process
• Windows 7 Svchost.exe Taking 100% CPU? Analyze & Fix it
• How to Decrease the Svchost.Exe 100% CPU Utilization

Recently some people are having trouble with their Windows svchost.exe process after upgrading to Windows 7. The most common problem being that the CPU usage shoots up to 99% or 100% in some cases. The good news is you can analyze and fix this problem quickly.

Svchost Viewer is a small utility that allow users to check what all those svchost instances are all about and what services are each one of them running. In Windows 7 Task Manager you need to check Show Process From All Users to view the svchost.exe processes, be default they are hidden.

With this tool you can analyze, find more information about the service behind each svchost.exe process that is taking excessive memory or CPU, and turn it off.

This tool is not new, but the developer has recently released the latest version who’s backend has been completely rewritten and is not much faster.

Download Svchost Viewer

It is a portable tool and fully supports Windows 7. You can also try Process Hacker to find what services each svchost.exe process is running and how much memory and CPU usage they are taking. Enjoy!

More On AddictiveTips Right Now

• Svchost Process Analyzer: Identify svchost.exe Worms & Analyze All Instances Of The Process
• Fix svchost.exe Crash Caused By McAfee Or Virus
• How to Decrease the Svchost.Exe 100% CPU Utilization