View and importance of Windows service names and display names

Open services. msc. Right-click a service attribute to view the service name and display name of the service. The difference between the service name and display name is that the service name is defined by the system, it is used to identify other services, and the display name is displayed in services. the name in msc, as shown in "name": whether it is a service name or a display name, can be used for the net stop \ start command, the format is as follows: net stop \ start SERVICE_NAMEnet stop \ start "DISPLAY_NAME" shows the relationship between the service name and the display name. in msc, you can also view the attributes by using the SC command, such as SC query state = all | findstr "SERVICE_NAME DISPLAY_NAME". Someone may ask, why should I check this? Let's look at an example: assume that one of your 03 servers has been intruded, and now you need to check whether the server has been implanted with Trojans. First, you want to find a process named xenservice.exe in the task manager that is suspicious to the running process. Then you want to see the background service corresponding to the process: C: \ Documents ents and Settings \ Administrator> tasklist/svc | findstr xenserxenservice.exe 1900 xensvc so you know, this process is generated by a service named xensvc. Next, you open service. msc and want to see details about the service. The problem is that a service named xensvc cannot be found in the service window. Why? Because the service name displayed in the service window is the display name (DISPLAY_NAME), rather than the service name (SERVICE_NAME ). Therefore, we need to check the display name of the first service xensvc: SC query state = all | findstr "SERVICE_NAME DISPLAY_NAME" in the output result, the corresponding display name is Citrix Tools for Virtual Machines Service: SERVICE_NAME: xensvcDISPLAY_NAME: Citrix Tools for Virtual Machines Service, and then return to the Service window, find the Service named Citrix Tools for Virtual Machines Service:
Obviously, this is a service related to virtual machines, not a Trojan program. Author wwmshe