Comments on: Find Out What Is Behind The Scenes With ’svchost.exe’ http://www.pcmech.com/article/find-out-what-is-behind-the-scenes-with-svchostexe/ Helping Normal People Get Their Geek On Sun, 22 Nov 2009 13:07:33 -0500 http://wordpress.org/?v=2.8.5 hourly 1 By: Sharron Field http://www.pcmech.com/article/find-out-what-is-behind-the-scenes-with-svchostexe/comment-page-1/#comment-20997 Sharron Field Sat, 21 Feb 2009 15:04:58 +0000 http://www.pcmech.com/?p=9207#comment-20997 Knowing exactly what process is running is indeed extremely useful; especially in the case of svchost: A lot of malware presents its process as svchost.exe, or variations of; such as scvhost.exe or svcvhost.exe, so knowing exactly what's going on can assist greatly in the hunt for malware on a compromised system. <i>Addendum: Do NOT shut down any instance of svchost.exe simply because it is suspected malware: Confirm that it definitely is in fact a malware process first, before killing it and deleting its registry key.</i> Knowing exactly what process is running is indeed extremely useful; especially in the case of svchost:

A lot of malware presents its process as svchost.exe, or variations of; such as scvhost.exe or svcvhost.exe, so knowing exactly what’s going on can assist greatly in the hunt for malware on a compromised system.

Addendum: Do NOT shut down any instance of svchost.exe simply because it is suspected malware: Confirm that it definitely is in fact a malware process first, before killing it and deleting its registry key.

]]>