svchost.exe is the most mysterious process in Windows XP/Vista. Svchost.exe is a generic host process name for services that run from dynamic-link libraries (DLLs). The authentic svchost.exe file is located in C:\Windows\System32, but a lot of viruses and trojans use the some file and process name to hide their activities. Svchost Process Analyzer enumerates all svhost instances and checks the containing services. So it is easy to discover svchost worms like the infamous Conficker worm.

Furthermore Svchost Process Analyzer detects trojan horses, worms or other malware names itself as svhost.exe, scvhost.exe or _svchost.exe file.