From: "Nisse PowerMan" <
[email protected]>
| How many svchost.exe should be running?
|
| What is the use of it?
|
| /Nisse
|
| --
| Remove the obvious part before replying by mail please!
It is normal to see multiple instances. 4 or 5 is not uncommon.
SVCHOST is the Daemon of Daemons, the Server of Services.
However, many forms of malware both viral and non-viral in nature also use the name
SVCHOST.EXE. So to be sure it is not a matter of how many instances are running but where
they are being executed from.
If they are NOT being executed from;
%windir%\system32\svchost.exe
Then the possibility of malware is "high".