SVCHOST

[John]

Greetings

How can I tell what process is running an instance of SVCHOST. I have 12
instances of SVCHOST showing and all are listening on different ports.
Firewall has them blocked outbound, but. . .

 

[John Thomas Smith]

How can I tell what process is running an instance of SVCHOST. I have 12
instances of SVCHOST showing and all are listening on different ports.
Firewall has them blocked outbound, but. . .

I don't remember which virus is the problem (could be Blaster, but
there are so many I can't keep track) but there is at least one virus
which specifically infects that program

Online removal tools here
http://securityresponse.symantec.com/avcenter/tools.list.html


John Thomas Smith
http://www.direct2usales.com
http://www.pacifier.com/~jtsmith

 

[Tom]

Greetings

How can I tell what process is running an instance of SVCHOST. I have 12
instances of SVCHOST showing and all are listening on different ports.
Firewall has them blocked outbound, but. . .

Click Start/Program/Accessories?Command Prompt

Type (no quotes) "tasklist /svc" (there is a space between t and /). You
then will get a list of running service, and each svchost.exe list will give
deatil to what is being used in each instance. If you are unsure about what
certain instances are,click Start/Help and Support and type them in the
search box, or use Google for more info.

 

[Jym]

I have never seen that . That command will not work on my XP Home. Why? Jym

 

[Wesley Vogel]

Tasklist does not come with XP Home.

Tasklist.exe available here:

http://www.computerhope.com/download/winxp.htm

Or

http://www.mvps.org/sramesh2k/utils/

Or

http://www.mvps.org/sramesh2k/utils/tasklist.exe


Copy it to C:\WINDOWS\system32

Start | Run | type: cmd | OK
When Command window opens type:

tasklist /svc | ENTER

Also:
tasklist /?

Displays Help and usage.