PDA

View Full Version : svchost.exe


mdlsFREAK
04-28-2005, 11:10 PM
is this a threat?...

jbog91
04-28-2005, 11:22 PM
....
svchost.exe is a system process belonging to the Microsoft Windows Operating System which handles processes executed from DLLs. This program is important for the stable and secure running of your computer and should not be terminated. Note: svchost.exe is a process which is registered as the W32.Welchia.Worm. It takes advantage of the Windows LSASS vulnerability, which creates a buffer overflow and instigates your computer to shut down. To see more information about this vulnerability please look at the following Microsoft bulletin: http://www.microsoft.com/technet/security/bulletin/ms04-011.mspx This is a registered security risk and should be removed immediately. Please see additional details regarding this process

If you have any more questions about tasks, ask here or try the program listed to the right of this page.
http://www.neuber.com/taskmanager/process/svchost.exe.html

odoe
04-28-2005, 11:27 PM
Normally you would see a few svchost instances in yor processes. Differet things use. It can be hijacked, but it would just show up in your process as another svchost instance. If you think you might have a worm or trojan, check out this thread. (http://www.hardforum.com/showthread.php?t=768776)

too slow, yeah what jbog91 says above.