Are all of these services legitimate?

  • Thread starter Thread starter The Old Timer
  • Start date Start date
T

The Old Timer

I have heard that many worms are hidden in a file called svchost.exe.
Under Processes in Windows Task Manager I have 5 instances of this listed.
The headings under image name are all the same svchost.exe. Under the user
name they are listed as SYSTEM, LOCAL SERVICE, NETWORK SERVICE. The latter
2 are listed twice with 2 different sets of Mem Usage & I/O reads.
legitimate.
 
The Old Timer said:
I have heard that many worms are hidden in a file called svchost.exe.
Under Processes in Windows Task Manager I have 5 instances of this listed.
The headings under image name are all the same svchost.exe. Under the
user
name they are listed as SYSTEM, LOCAL SERVICE, NETWORK SERVICE. The
latter
2 are listed twice with 2 different sets of Mem Usage & I/O reads.
legitimate.

svchost.exe is legitimate and it is normal to have multiple instances of it
running in your process listing. There is a worm that masquerades with this
filename, but if your AV software is up to date, it should catch it.

More info here:

http://support.microsoft.com/?kbid=314056
http://www.neuber.com/taskmanager/process/svchost.exe.html
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Back
Top