determing svchost.exe processes question??

[kmillerusaf]

I was reading an article on how to determine what specific processes were running under svchost.exe and the command 'tasklist /svc /fi "imagename eq svchost.exe"' will not work when I type it in command prompt. I am running XP Home. I do realize that there is a program out there to do this for me but if possible I would like to limit the programs installed on here if I can do something manually. I also feel it would help me continue to learn more about computers. Thanks in advance.

Keith

[flanzig1]

Looks like you need XP Pro to do that trick according to this: http://www.bleepingcomputer.com/tuto...torial129.html

[faulkner132]

Pretty much everything which runs under "svchost.exe" is a system process you wouldn't want to mess with anyway. If you want to modify which services are running at startup you can either use "msconfig" (Services tab) or change the services directly (Start > Run > services.msc).

[kmillerusaf]

True but that is not always true is it faulkner? Can't viruses embed themselves into svchost.exe and act as a dll or service? I appreciate the help though and I downloaded that program since it is only for XP Pro.

Keith

[DynamicTech]

Try this application:
http://www.microsoft.com/technet/sys...sExplorer.mspx

[kmillerusaf]

Thanks but that's the program I was speaking of

[DynamicTech]

Sorry guy,
I should've read the post.

You can use autoruns to easily view what programs are being loaded through the registry.
These two programs are very effective in tracking down rogue processes.

[faulkner132]

Originally Posted by kmillerusaf Can't viruses embed themselves into svchost.exe and act as a dll or service?

Anything installed as a service will be visible under msconfig or services.msc. If a virus has hijacked svchost.exe, you have bigger problems.