SVCHOST

[MSR63]

I have 9 svchost.exe processes running
3 run under LOCAL SERVICE
4 run under SYSTEM
2 run under NETWORK

I have confirmed my Symantec Engine is updated and has the latest definition. I atempted to end task on these processes only to see them pop back up and/or cause my system to shut down.

I have been looking for info on this and some say it's a backdoor trojan and others report it's a Microsoft file that is mandatory.

Any comments?

 

[2ffat]

svchost is a MS program and it CAN be hijacked. It is not unusual to have multiple instances running. I have 6 running right now. If your antivirus and antispyware programs are running and current, you should be OK.





James P. Cottingham
-----------------------------------------
^{I'm number 1,229!
I'm number 1,229!}

 

[electronicsfreak]

Information here as well as locations

http://www.liutilities.com/products/wintaskspro/processlibrary/svchost/

http://support.microsoft.com/kb/314056

You will find it in multiple locations such as prefetch, system32 and possibly other locations. As 2ffat mentioned , it is a legit process and can be hijacked but I rarely see it happening.

There is a point in wisdom and knowledge that when you reach it, you exceed what is considered possible - Jason Schoon

 

[MSR63]

Super!

Thank you two for your wise knowledge And for the links so I can read up on it.