Check whether the process of cmdsvchost.exe is normal.

There is a tasklist.exe program in windows XP.

Run tasklist/svc in CMD to view the services in each process, as shown in figure

System Idle Process 0 is missing
System 4 is missing
Smss.exe 444 is missing
Csrss.exe 508 is missing
Winlogon.exe 532 is missing
Services.exe 576 Eventlog, PlugPlay
Lsass.exe 588 yyagent, ProtectedStorage, SamSs
Svchost.exe 748 DcomLaunch, TermService
Svchost.exe 788 RpcSs
Svchost.exe 1140 AudioSrv, Browser, CryptSvc, Dhcp, dmserver,
EventSystem, FastUserSwitchingCompatibility,
Helpsvc, LanmanServer, lanmanworkstation,
Netman, Nla, RasMan, Schedule, seclogon,
SENS, SharedAccess, ShellHWDetection,
TapiSrv, Themes, TrkWks, W32Time, winmgmt,
Wscsvc, wuauserv, WZCSVC
Svchost.exe 1652 Dnscache
Svchost.exe 1688 Alerter, LmHosts, WebClient
Assumer.exe 316 is missing
RavMon.exe 472 is missing
ThunderMini.exe 476 is missing
Ctfmon.exe 488 is missing
Nvsvc32.exe 1396 NVSvc
RavMonD.exe 1452 RsRavMon
Wdfmgr.exe 1716 UMWdf
Alg.exe 1236 ALG
PortalClient.exe 1648 is missing
Cmd.exe 1928 is missing
Conime.exe 1840 is missing
Wmiprvse.exe 1384 is missing
Tasklist.exe 1264 is missing

Generally, svchost processes are service processes. If a svchost does not contain a service name, it is suspicious and should be checked for viruses.

 

Author's Blog:
Http://blog.csdn.net/bluekylin/