| crapy clawn forums http://crapyclawn.net/lolwords/ |
|
| Random Computer Question - svchost service hosts and spyware http://crapyclawn.net/lolwords/viewtopic.php?t=2156 |
Page 1 of 1 |
| Author: | wardryer [ Fri Aug 17, 2007 10:48 pm ] |
| Post subject: | Random Computer Question - svchost service hosts and spyware |
So I have 6 instances of svchost.exe running in my process manager and I wonder which ones are good and which are spyware. Any idea how to tell. If I close the wrong one it does an auto shutdown of windows... so, anyone know? |
|
| Author: | Agent_137 [ Sat Aug 18, 2007 12:45 am ] |
| Post subject: | |
install and run spybot and ad-aware. i don't even use ad aware, but between the two, they'll get everything. http://www.safer-networking.org/ http://www.lavasoftusa.com/ i have six scvchosts running. if it says SYSTEM or NETWORK SERVICE, definietly don't fuck with it. if it has your login name next to it, you can shut it down safely in most cases. i don't know what to do with a local service one. just leave it. |
|
| Author: | Hogg [ Sat Aug 18, 2007 1:18 am ] |
| Post subject: | |
Windows runs a dickload of services, some necessary, some not. A service means stuff that runs in the background and does some useful thing for the system - for example, Windows includes a few services to handle your networking, like wireless setup, grabbing an IP automatically, etc. Symantec Antivirus installs a few services so it can always run in the background. Anyways, services are handled by the Windows program svchost.exe . To see which services you have running, go to "Run..." in the Start Menu (or hold your Windows key and press R) and run services.msc . It'll show a list of all the services currently running, what they do, and it'll allow you to stop/start them. That said, I doubt any of yours are spyware unless the spyware installed itself as a service. I'd recommend getting Autoruns ( http://www.microsoft.com/technet/sysint ... oRuns.mspx ) to see what's set up to run at startup (it displays services as well as regular programs), and also Process Explorer ( http://www.microsoft.com/technet/sysint ... lorer.mspx ), which is like ctrl+alt+del on steroids and will show you *all* of what's running on your system with more details. You can Google the name of a process if you don't know what it is; there are sites out there where you can check what the hell it is and what it's for. If you wanna dig in thar reel good, check out Process Monitor ( http://www.microsoft.com/technet/sysint ... nitor.mspx ) which should show you file and registry activity on your system, and finally FPort ( http://www.foundstone.com/us/resources/ ... /fport.htm ) which shows you all open network connections and which process they belong to. Sadly it's only a command-line utility at this point. Here's a howto page: http://www.ibiblio.org/security/articles/fport.html . Additionally, phalluses. |
|
| Author: | SVARRENGLOSSEN II [ Sat Aug 18, 2007 2:42 am ] |
| Post subject: | |
svchost = service host if you want to try and cut down on how many services you have running (a few are superfluous and not really needed), type services.msc in run, and consult this site: http://www.beemerworld.com/tips/servicesxp.htm |
|
| Author: | 1ucksh0t [ Sat Aug 18, 2007 4:49 am ] |
| Post subject: | |
hogg, that info was fucking priceless, i love my new toys, thanx! |
|
| Page 1 of 1 | All times are UTC-06:00 |
| Powered by phpBB® Forum Software © phpBB Limited https://www.phpbb.com/ |
|