![](/uploads/1/2/6/5/126576840/710112771.jpg)
Svchost.exe (netsvcs) is a Windows system process that is very necessary to keep the system functioning in a stable condition. However, if it gets out of control, then it can eat up all your Internet speed for running Windows services. Svchost.Exe (NetworkService) jumps to 100% when bit messed up lately, can't find the solution. I need to stop the service in Source control, to keep my laptop from crashing. (as the CPU gets to hot and shuts down the Laptop without warning.) Aswell with 3D software or heavy programs same issue.
![Svchost network services high cpu Svchost network services high cpu](/uploads/1/2/6/5/126576840/149577410.png)
![(networkservice (networkservice](/uploads/1/2/6/5/126576840/259164854.png)
Some malware often uses a process name of svchost.exe to disguise itself. The original system file svchost.exe is located in C:WindowsSystem32. Are those services located somewhere else? If they do, then they are malware.What is svchost.exe?svchost.exe is a system process that hosts multiple Windows services or as Microsoft describes: 'svchost.exe is a generic host process name for services that run from dynamic-link libraries'.Why are there multiple svchost.exes?There are multiple instances of this service, because if every single service ran under a single svchost.exe instance, a failure in one might bring down all of Windows, thus they a separated.You can analyze the services using a tool like and gain more information about their activity.References. No, it is not a virus / malware.You say it only appears when you open Firefox, there is possibly no malware behind this.I also have this svchost process running LocalServiceAndNoImpersonation and this PC is clean.So far LocalServiceAndNoImpersonation is a legit process and is used by Windows AppLocker.Windows AppLocker is a security feature of Windows.AppLocker is a new feature in Windows 7 and Windows Server 2008 R2 that allows you to specify which users or groups can run particular applications in your organization based on unique identities of files. If you use AppLocker, you can create rules to allow or deny applications from running.You can inspect it with ProcessExplorer.There should be also the loaded DLL mentioned.A Microsoft Service that is used by AppLocker to determine and verify the identity of an applicaiton. Please note that this service is launched by svchost.exe, but the actual application is what is listed as the filename.
![](/uploads/1/2/6/5/126576840/710112771.jpg)