Multiple RuntimeBroker.exe and Svchost.exe

treeguy01 · 03 Feb 2018

I opened my task manager today and I randomly fell upon having 3-5 RuntimeBroker.exe and having many many many svchost.exe. Do I have a virus and if so what should I do to fix this issue. The runtimebrokers.exe are inside other processes. Pictures below.

Multiple RuntimeBroker.exe and Svchost.exe-6188d484d6fbd0eaa21c7e4354e1140a.png

Multiple RuntimeBroker.exe and Svchost.exe-723815c4998dba06d90fe118948fbb3d.png

Multiple RuntimeBroker.exe and Svchost.exe-a470d3cf84c52e4f2d908e951e8ba790.png

Multiple RuntimeBroker.exe and Svchost.exe-fa88030b79538c5dc3b40bc9b80747bd.png

Eagle51 · 03 Feb 2018

Hey treeguy1,
Mine looks the same, must have 60 scvhost running and that is normal for Win10 :)

Note: I don't think you have a virus, but if you're concerned about a virus.
1, Do a scan with Windows Defender or your AV
2. Do a scan with Malwarebytes Free - Malwarebytes | Free Anti-Malware & Malware Removal

FreeBooter · 04 Feb 2018

Svchost.exe (Service Host, or SvcHost) is a system process that hosts multiple Windows services in the Windows NT family of operating systems. You may notice multiple Svchost.exe processes this is normal because if every single service ran under a one Service Host process, a failure in one service could potentially bring down all of Windows. Instead, they are separated out.

With Windows 10 processes are shown on the “Processes” tab of Task Manager by their full names. If a process serves as a host for multiple services, you can see those services by simply expanding the process. This makes it very easy to identify which services belong to each instance of the Service Host process.

You can right-click any individual service view it in the “Services” Control Panel app, or even search online for information about the service.

Runtime Broker make sure apps you have downloaded from Microsoft Store declaring all of their permissions, like being able to access your location or microphone.

Bree · 04 Feb 2018

FreeBooter said:

Svchost.exe (Service Host, or SvcHost) is a system process that hosts multiple Windows services in the Windows NT family of operating systems. You may notice multiple Svchost.exe processes this is normal because if every single service ran under a one Service Host process, a failure in one service could potentially bring down all of Windows. Instead, they are separated out....

...indeed they are - in fact the way they are separated out was substantially revised with the release of Creators Update (1703). With >3.5GB available RAM almost every process will now get its own svchost.exe

Bree said:

"Why do i have 72 svchost.exe processes in my windows 10?"

Because you have just upgraded to the Creators Update, I'd guess. The way services are organised changed substantially in 1703. I have 70+ 'svchost.exe' running too.

In Windows 10 v1703 systems with more than 3.5 GB of RAM, each service would get its own service host (svchost.exe), instead of running under a shared service process...
...up until Windows 10 v1607, each svchost.exe process used to host a set of services — a model originally designed to reduce resource usage by services...

http://www.winhelponline.com/blog/vi...st-windows-10/

Thanks go to Dalchina for that link, from this thread...
Creators Update: number of processes

LMiller7 · 04 Feb 2018

I believe Linux has always followed the principle of one service per process. The situation isn't quite the same but the same principles apply.

Josey Wales · 04 Feb 2018

Eagle51 said:

Hey treeguy1,
Mine looks the same, must have 60 scvhost running and that is normal for Win10 :)

Note: I don't think you have a virus, but if you're concerned about a virus.
1, Do a scan with Windows Defender or your AV
2. Do a scan with Malwarebytes Free - Malwarebytes | Free Anti-Malware & Malware Removal

Only 60? I have 120 Right now.