SVC host question

[SnoringFrog]

Normally I wouldn't worry too much about this, but we've been having some computer problems lately.

Now, when we restart our computer, our anti-virus registers that a "Generic Host Process" is trying to act as a server. I've been denying it access, but then I was having problems with some other stuff that normally works fine; the two things may be unrelated, but I'm not sure if not allowing this specific svchost to act as a server could be messing stuff up.

The svchost is in system32 and is 14,336 bytes; is that a normal place/size for one of those? I know they can vary, but I don't know where they should be or anything.

[Kaligraphic]

svchost is a normal system process in Windows XP and, though I haven't checked, probably Vista as well. You are probably even running more than one instance of it right now. These processes do everything from applying themes, to scheduling tasks, to acting as a web server, to updating your computer's internal clock, to downloading Windows updates, and a bunch more. (Most of the Windows services your computer is running are actually running in svchost.)

If you give an example of what you're having problems with, I might be able to steer you in the right direction.

[SnoringFrog]

I ended up stoping my antivirus from blocking it, and I haven't seen any problems since. I can't really explain the other problem we'd had too well, as I didn't see if myself. Apparently the computer was having problems running any program at all, but that seems fixed now as well.

I'm assuming that svchost is supposed to run out of System32, because I've heard that just because it's an svchost doesn't necessarily mean it's a legit one, which is why I was wondering. All seems good though, I'll run some virus scans soon just to be sure though. Some people at work recently screwed up a comp with a virus, so I've been on edge about every problem being a virus, lol.

[Saj]

svchost.exe is a system process belonging to the Microsoft Windows Operating System which handles processes executed from DLLs. This program is important for the stable and secure running of your computer and should not be terminated.

[muskrat]

If you're really curious:
link

I personally haven't tried it, but I remember reading the article. Its by the Microsoft Scripting Guys so its semi-official.