 Are My 7 Svchost.exe Files Running At Startup Legitimate?, svchost.exe |
Welcome Guest ( Log In | Click here to Register a free account now! )
Register a free account to unlock additional features at BleepingComputer.com
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
BleepingComputer.com > Bleeping Computer Applications and Guides > Windows Startup Programs Database  |
 Dec 10 2007, 05:11 PM
Post
#1
|
|
|
New Member  Group: Members Posts: 13 Joined: 17-February 07 Member No.: 112,298  |
c:\WINDOWS\$NTServicePackUninstall$ (I think this is a hidden file--I have hidden files turned off and it's in blue) c:\WINDOWS\Prefetch c:\WINDOWS\system32 c:\WINDOWS\ServicePackFiles\i386 d:\WINDOWS\system 32 That's is what I get when I do a drive search for svchost.exe. I see that I have WINDOWS twice in my computer--on the c: drive and the d: drive. I'll have to ask about that later. I think my computer is running slower than it used to and I am checking out my startup files. RAM: 1.61 GHz, 384MB of RAM Free Space: 7.08 GB Windows XP Home |
 |
 
|
|
Dec 11 2007, 02:55 AM
Post
#2
|
|
 Bleepin' Night Watchman Group: BC Advisor Posts: 1,975 Joined: 5-December 05 From: The City of Saint Francis, by the western sea Member No.: 43,307 |
Try this:
1. Download Process Explorer (Free from Microsoft) 2. Run Process Explorer (no installation needed) 3. You should see a list of all running processes and their vital statistics 4. Hold your mouse over each instance of svhost.exe to see a list of which programs are utilizing that instance (there's usually a couple) That'll give you a clue as to what's happening. --------------------  Social Lives Are Overrated. |
|
|
|
|
Dec 11 2007, 07:53 PM
Post
#3
|
|
|
New Member Group: Members Posts: 13 Joined: 17-February 07 Member No.: 112,298 |
Thank you Andrew. I ran the Process Explorer and here’s what I got when I ran my curser over each svchost.exe. All of them are in C:\WINDOWS\System32\svchost.exe. Does anyone see anything suspicious or maybe why my Internet Explorer is being hijacked (I’m getting help on that in another forum).
PID DESCRIPTION COMPANY Svchost.exe 852 Generic Host Process for Win32 Services Microsoft Corporation Services: DCOM Server Process Launcher [DcomLaunch] Terminal Services [TermService] Svchost.exe 912 Generic Host Process for Win32 Services Microsoft Corporation Services: Remote Procedure Call (RPC) [RpcSs] Svchost.exe 1004 Generic Host Process for Win32 Services Microsoft Corporation Services: Com+ Event System [Event System] Computer Browser [Browser] Cryptographic Services [CryptSvc] DHCP Client [Dhcp] Distributed Line Tracking Client [TrkWks] Error Reporting Service [ERSvc] Fast User Switching Compatibility [FastUserSwitchingCompatibility] Messenger [Messenger] Network Connections [Netman] Network Location Awareness (NLA) [Nla] Remote Access Connection Manager [RasMan] Secondary Logon [seclogon] Security Center [wscsvc] Server [lanmanserver] Shell Hardware Detection [ShellHWDetection] System Event Notification [SENS] System Restore Service [srservice] Telephony [TapiSrv] Themes [Themes] Windows Audio [AudioSrv] Windows Firewall/Internet Connection Sharing {ICS}[SharedAccess] Windows Management Instrumentation [winmgmt] Windows Time [W32Time] Wireless Zero Configuration [WZCSVC] Workstation [lanmanworkstation] Svchost.exe 1184 Generic Host Process for Win32 Services Microsoft Corporation Services: DNS Client [Dnsache] Svchost.exe 1296 Generic Host Process for Win32 Services Microsoft Corporation Services: Alerter [Alerter] SSDP Discovery Service [SSDPSRV] TCP/IP NetBIOS Helper [LmHosts] Svchost.exe 1576 Generic Host Process for Win32 Services Microsoft Corporation Services: HTTP SSL [HTTPFilter] Svchost.exe 229 Generic Host Process for Win32 Services Microsoft Corporation Services: Automatic Updates [wuauserv] |
|
|
|
|
Dec 11 2007, 08:03 PM
Post
#4
|
|
|
Bleepin' Night Watchman Group: BC Advisor Posts: 1,975 Joined: 5-December 05 From: The City of Saint Francis, by the western sea Member No.: 43,307 |
Looks fine to me!
-------------------- Social Lives Are Overrated. |
|
|
|
|
2 User(s) are reading this topic (2 Guests and 0 Anonymous Users)
0 Members:
| Lo-Fi Version | Time is now: 9th January 2009 - 03:18 AM |
© 2003-2008 All Rights Reserved Bleeping Computer LLC.