How to Tell if Svchost Is Real or a Trojan

Written by thomas king
  • Share
  • Tweet
  • Share
  • Pin
  • Email
How to Tell if Svchost Is Real or a Trojan
A slow computer is a common symptom of a Trojan. (Darrin Klimek/Photodisc/Getty Images)

Svchost.exe is a process belonging to Microsoft. More specifically, svchost.exe is a host process that helps administer dynamic link libraries. The process is essential to the proper functioning of the Windows operating system and thus should not be removed. Several malicious programs, including worms and Trojans, install a process named svchost.exe. To determine whether the svchost.exe process on your computer belongs to Microsoft or a Trojan, you will need to view the process details in the Windows Task Manager.

Skill level:

Other People Are Reading


  1. 1

    Press "Ctrl," "Shift" and "Escape" to open the Task Manager.

  2. 2

    Click the "Processes" tab of the Task Manager.

  3. 3

    Click "Show Processes From All Users" and "Image Name." A list of all the processes running on your computer appears under the Image Name heading in alphabetical order.

  4. 4

    Right-click on "svchost.exe" and select "Properties."

  5. 5

    Click the "Details" tab. Next to Copyright, it should state "Microsoft Corporation." If it does not, the svchost.exe process in question likely belongs to a Trojan.

Don't Miss

  • All types
  • Articles
  • Slideshows
  • Videos
  • Most relevant
  • Most popular
  • Most recent

No articles available

No slideshows available

No videos available

By using the site, you consent to the use of cookies. For more information, please see our Cookie policy.