Why does svchost access the internet?

Read the article that everyone's commenting on.
Subscribe to the RSS Feed for comments on this article.

Thanks, Leo. That was helpful information. I'll certainly be on the lookout for the sCV.exe file in future.

Thanks,Leo for jogging my memory on switching off the clock auto update WRT svchost. It worked!

is it possible to change contents of registry by some program (without users notice). if this happens, i tell/warn u that chances are that it could send critical info to hackers.

If someone can help me by explaining weather registry contents(services part) can altered/added/changed and how this can be ahcieved then i would be very thankful to those whoever helps me.

I think that you will find that it attempts to access the net far more frequently than you realise (averaging out about once per minute).
I am using XP Pro - SP2.
I have written an email program and it is not allowed to connect to the POP server unless I let svchost.exe send whatever it wants to send!

svchost IS definately required to connect to the internet in once instance. that is for updates from the Windows update website, if it is disabled when trying to connect then the site will not work.

It's very likely that windows' automatic updater is at work here. What is very strage is that on my machine, it sent out far more data than it downloaded. From now on, only manual updates for me.

I'm having problems with my office network in that my client computer continually dials out to the internet and the only way to stop it is restrict access to that unit.

I installed a firewall and that indicated to me that svchost.exe is the culprit and as above, I've switched off Windows XP auto-update and the date/time synchro, but the little bugger is still trying to connect to the internet.

Given that svchost is merely the 'taxi service' to the internet, how do I check to see who the passenger is? ie: which program is using the svchost to get to the internet?

You should be able to use sysinternals process explorer ( http://ask-leo.com/d-procexp ) to see the command lines and parameters used for each instance of svchost. With procexp running, right click on the svchost you want to look at and hit properties.

Thank god for clearing it up! It happened to me last week & not knowing what the problem & to do. Just unbelievable! It consumes & create incoming traffic activity on my internet connection. Stupid of me leaving the problem behind!

Great info -

I think you may have some of the best info and best callers on the web.

So then it is ok for SVChost to access the internet? I currently have it blocked by my firewall (ZA).

To post a comment on "Why does svchost access the internet?", please return to that article's main page.