searched for the role of the Svchost host process on the Internet and found that svchost is an important process in windows. Many dynamic link library dll services depend on the existence of the svchost host. Generally, there are four to five svchost. Win2003 instances under xp. All automatically loaded services will
Svchost.exe is a very important process in the Windows operating system based on ntversions. Many viruses and Trojans reside in the system and are closely related to this process. Therefore, it is necessary to have a deep understanding of this process. This article describes the functions of the svchost process and its knowledge. Svchost Process OverviewMicrosoft defines "
Enter SVCHOST
The SVCHOST process is notorious now. It was originally used by Windows to start various services, but virus and Trojan horses also tried their best to use it and attempt to confuse users by using its features, to infect, intrude, and destroy the virus, such as the shock wave variant W32.Welchia. worm "). When we look at SVCHOST, we suspect that we
Many workers do not know much about the svchost.exe process. Sometimes, once you see multiple processes in the Task Manager (six in Figure 1), you will think that your computer is infected with viruses or Trojans, this is not the case! Normally, multiple svchost.exe processes can run simultaneously in windows. For example, Windows 2000 has at least two svchost processes, Windows XP has more than four, and Windows 2003 has more. So when you see multipl
divided into two types: independent processes and shared processes. The "SVCHOST. EXE" file is stored in the "% SystemRoot % system32" directory and is a shared process. With the increasing number of Windows system services, Microsoft has made many services shared to the svchost. EXE process to save system resources. But the
XP is infected with w32.welchia. worm. The normal svchost file exists in the "C: \ WINDOWS \ System32" directory. Be careful if the file appears in other directories. "W32.welchia. the worm virus exists in the "C: \ WINDOWS \ system32wins" directory. By using the method described above, you can easily view the execution file paths of all svchost processes, once
dependent on the Svchost host exists. There are 4 to 5 Svchost under General XP. There will be more Win2003. All automatically loaded service after the boot willRun on the svchost. and specifically what service load can be viewed with the command line Tasklist/svc.One of the svchost loads a lot of services, has into a
shown here is the same as that shown in the service, but it is only a DOS interface.
TIPS: in Windows xp, the "tasklist/svc" command will receive the same effect.
Due to the length of the article, all functions of Svchost cannot be described in detail. This is a special process in Windows. If you are interested, refer to the relevant technical materials to learn more about it.Next, we have used svchost.exe to launch the trojan program. Here, I chose
What's svchost?
What is the Svchost.exe process? To put it simply: Svchost.exe is a system program that belongs to Microsoft's Windows operating system, and Microsoft's official explanation is that Svchost.exe is the generic host process name for a service running from a dynamic-link library (DLL). This program is very important to the normal operation of the system and cannot be terminated.
Windows system processes are divided into separate proce
Vchost is the most mysterious process in Windows, and many new users are puzzled by it. It is a service host for Windows, and many of the system's own services run through it. Simple analogy, it is equivalent to the system service vest. But Svchost sometimes the CPU is very high, how to see through its vest to find the real killer? We use Task Manager to find out the culprit.
STEP01 into Task Manager: Right-click in the blank space of the taskbar, se
1. The origin of SvchostWindows system services can now be divided into separate processes and shared processesIn Windows NT, only the Service Manager SCM (Service.exe) has multiple shared services. With the increase of the service of the system, in order to enhance the performanceStarted to share many services in Windows2000 and started by Svchost.exeSvchost.exe itself does not implement any service functionality, but a DLL that needs to be serviced can be loaded by
View the "svchost" Process
Svchost.exe is a core process of Windows XP. Svchost.exe not only appears in Windows XP, but also exists in the Windows System Using ntinner. Generally, in Windows 2000, the number of svchost.exe processes is 2, while in Windows XP, the number of svchost.exe processes has increased to 4 and more.
For example, how can we identify normal svchost.exe processes and what are virus processes?
The key value of svchost.exe is in th
Recently, as long as the network is connected, the cup will be occupied by a svchost process in a few minutes. Because I have two wireless Wired connection methods, this will not happen in Wired connection, this problem occurs during wireless connection, so it is possible to eliminate the possibility of poisoning. I finally found an article to solve this problem.
Article
Reference URL: http://www.maxgo.cn/2007/03/28/109
When you run Windows au
The Svchost process has been in high CPU for many years, and Microsoft released patches to fix the problem as early as 2007, but it was for Windows XP SP2, and the same problem appeared on SP3. There is user feedback that the Svchost process will pull the CPU occupancy rate up to 100% after the new installation (clean install) of Windows XP SP3.
In November and early December, Microsoft released two update
A svchost. EXE load list is XP, and Win2000 may be different from rpcss, netsvcs, and imgsvc may belong to the System subtype. The user started in the Process Manager will display the System
-K LocalServiceAlerterRemote RegistrySSDP Discovery ServiceTCP/IP NetBIOS HelperUniversal Plug and Play Device HostWebClient
-K rpcssRemote Procedure Call (RPC)
-K NetworkServiceDNS Client
-K imgsvcWindows Image Acquisition (WIA)
-K netsvcsApplication ManagementAu
The Svchost process starts when the system is powered on, automatically networked, and then occupies a large number of networks. So how do you solve the problem?
The specific methods are as follows:
1, first in the lower left corner search area to search the control Panel, and then open, open the selection of management tools-services, of course, a lot of access to the service options, Device Manager access can also.
2. Find--background Intellige
A computer is a little faulty (the system is Windows 2000). During Processing, I want to clean up the malware in it and use the Windows cleanup assistant to scan and clear it. First, the "cleanup object" is cleared, and there is a prompt in the middle that you need to delete the driver level. If you have done this before, you will be allowed. A blue screen will appear when the system is shut down before restart, and the system will be normal after restart, if there is no problem, we will proceed
A lot of people who use the computer find this problem--in 360 of the network traffic manager can see themselves in the absence of the Internet, no software upgrade program, or even Windows comes with the upgrade program is turned off (of course, the network must be connected in the case) the traffic display has 30~60KB /s traffic generated, a lot of people are very puzzled, what's going on? Open 360 Traffic process Manager A look, it is svchost.exe this thing is downloading things, it is strang
(Conversion) Figuring out why my SVCHOST. EXE is at 100% CPU without complicated tools in Windows 7, figuring
(Reproduced from: http://www.hanselman.com/blog/FiguringOutWhyMySVCHOSTEXEIsAt100CPUWithoutComplicatedToolsInWindows7.aspx)
The SvcHost.exe process hosts services that run in the background on Windows. it's literally "Service Host. "You may have a dozen services or more running inside that process. more complex is that you'll sometimes see mu
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.