HomeCÔNG NGHỆConsole window host là gì

Console window host là gì

00:56, 19/03/2021

You are no doubt reading this article because you’ve sầu stumbled across the Console Window Host (conhost.exe) process in Task Manager and are wondering what it is. We’ve got the answer for you.

Bạn đang xem: Console window host là gì

RELATED: What Is This Process & Why Is It Running on My PC?

This article is part of our ongoing series explaining various processes found in Task Manager, like svchost.exe cộ, dwm.exe pháo, ctfmon.exe pháo, mDNSResponder.exe cộ, rundll32.exe pháo, Adobe_Updater.exe cộ, & many others. Don’t know what those services are? Better start reading!

So What Is the Console Window Host Process?

Understanding the Console Window Host process requires a little bit of history. In the Windows XPhường. days, the Command Prompt was handled by a process named the ClientServer Runtime System Service (CSRSS). As the name implies, CSRSS was a system level service. This created a couple of problems. First, a crash in CSRSS could bring down a whole system, which exposed not just reliability issues, but possible security vulnerabilities as well. The second problem was that CSRSS could not be themed, because the developers didn’t want to lớn risk theme code to run in a system process. So, the Commvà Prompt always had the classic look rather than using new interface elements.

Notice in the screenshot of Windows XPhường below that the Comm& Prompt doesn’t get the same styling as an phầm mềm lượt thích Notepad.


RELATED: What Is Desktop Window Manager (dwm.exe) and Why Is It Running?

Windows Vista introduced the Desktop Window Manager—a service that “draws” composite views of windows onto your desktop rather than letting each individual app handle that on its own. The Commvà Prompt gained some superficial theming from this (lượt thích the glassy frame present in other windows), but it came at the expense of being able khổng lồ drag & drop files, text, và so on inkhổng lồ the Comm& Prompt window.

Still, that theming only went so far. If you take a look at the console in Windows Vista, it looks like it uses the same theme as everything else, but you’ll notice that the scrollbars are still using the old style. This is because the Desktop Window Manager handles drawing the title bars & frame, but an old-fashioned CSRSS window still sits inside.


Enter Windows 7 và the Console Window Host process. As the name implies, its a host process for the console window. The process sort of sits in the middle between CSRSS & the Commvà Prompt (cmd.exe), allowing Windows to lớn fix both of the previous issues—interface elements lượt thích scrollbars draw correctly, and you can again drag & drop into lớn the Commvà Prompt. And that’s the method still used in Windows 8 and 10, allowing all the new interface elements & styling that have come along since Windows 7.

Even though the Task Manager presents the Console Window Host as a separate entity, it’s still closely associated with CSRSS. If you check the conhost.exe process out in Process Explorer, you can see that it actually runs under the csrss.ese process.


In the over, the Console Window Host is something like a shell that maintains the power of running a system-level service like CSRSS, while still securely and reliably granting the ability khổng lồ integrate modern interface elements.

Xem thêm: Hướng Dẫn Làm Thiệp Giáng Sinh Bằng Tay Đơn Giản Đẹp Nhất, 57 Thiệp Noel Ý Tưởng

Why Are There Several Instances of the Process Running?


You’ll often see several instances of the Console Window Host process running in Task Manager. Each instance of Comm& Prompt running will spawn its own Console Window Host process. In addition, other apps that make use of the command line will spawn their own Console Windows Host process—even if you don’t see an active sầu window for them. A good example of this is the Plex Media Server ứng dụng, which runs as a background phầm mềm và uses the comm& line lớn make itself available to other devices on your network.

Many background apps work this way, so it’s not uncommon khổng lồ see multiple instances of the Console Window Host process running at any given time. This is normal behavior. For the most part, each process should take up very little memory (usually under 10 MB) and almost zero CPU unless the process is active sầu.

That said, if you notice that a particular instance of Console Window Host—or a related service—is causing trouble, like continual excessive sầu CPU or RAM usage, you could kiểm tra inlớn the specific apps that are involved. That might at least give you an idea of where khổng lồ start troubleshooting. Unfortunately, Task Manager itself doesn’t provide good information about this. The good news is that Microsoft provides an excellent advanced tool for working with processes as part of its Sysinternals lineup. Just tải về Process Explorer & run it—it’s a portable phầm mềm, so no need khổng lồ install it. Process Explorer provides all kinds of advanced features—& we highly recommkết thúc reading our guide to understanding Process Explorer lớn learn more.

RELATED: What Is a "Portable" App, và Why Does It Matter?

The easiest way to lớn traông xã these processes down in Process Explorer is lớn first hit Ctrl+F to start a tìm kiếm. Search for “conhost” và then click through the results. As you vày, you’ll see the main window change to lớn show you the tiện ích (or service) associated with that particular instance of Console Window Host.


If the CPU or RAM usage indicates that this is the instance causing you trouble, then at least you’ve sầu got it narrowed down lớn a particular tiện ích.

Could This Process Be a Virus?

The process itself is an official Windows component. While it’s possible that a vi khuẩn has replaced the real Console Window Host with an executable of its own, it’s unlikely. If you’d lượt thích to lớn be sure, you can check out the underlying tệp tin location of the process. In Task Manager, right-click any Service Host process và choose the “Open File Location” option.


If the tệp tin is stored in your WindowsSystem32 folder, then you can be fairly certain you are not dealing with a virus.

Xem thêm: Hướng Dẫn In Qua Mạng Wifi, 2 Bước Để Kết Nối Máy In Qua Mạng Wifi

There is, in fact, a trojan out there named Conhost Miner that masquerades as the Console Window Host Process. In Task Manager, it appears just like the real process, but a little digging will reveal that it’s actually stored in the %userprofile%AppDataRoamingMicrosoft thư mục rather than the WindowsSystem32 thư mục. The trojan is actually used lớn hijack your PC khổng lồ mine Bitcoins, so the other behavior you’ll notice if it’s installed on your system is that the memory usage is higher than you might expect & the CPU usage maintains at very high levels (often above 80%).

RELATED: What"s the Best Antivirus for Windows 10? (Is Windows Defender Good Enough?)

Of course, using a good vi khuẩn scanner is the best way lớn prevent (và remove) malware like the Conhost Miner, & it’s something you should be doing anyway. Better safe than sorry!

Walter GlennWalter Glenn is the Editorial Director for How-To Geek & its sister sites. He has more than 30 years of experience in the computer industry và over trăng tròn years as a technical writer và editor. He"s written hundreds of articles for How-To Geek and edited thousands. He"s authored or co-authored over 30 computer-related books in more than a dozen languages for publishers like Microsoft Press, O"Reilly, và Osborne/McGraw-Hill. He"s also written hundreds of white papers, articles, user manuals, và courseware over the years. Read Full Bio »

Chuyên mục: CÔNG NGHỆ