Greetings all,

Just wondering, can anyone tell me exactly how many occurrances of SVCHOST.EXE I should have running???
As of writing this I have a total of 5 of these running. Three of them are running under the user name 'SYSTEM', one is under 'NETWORK SERVICE', and another under 'LOCAL SERVICE'.
WinXP Pro.
Thanks for any guidance here; seems like a few too many to me.?
:-)

I think it is related to keyboard, monitor and stuff like that.

Not sure really. Just know that you should not shut them down :) No need to test, i can tell you what happens. ;)

Since your Running WinXP Pro you can use the Commandline to pull up more information:

First open up a command dialogue, usually typing CMD in the RUN box is the quickest method.

Once thats up type, Tasklist /svc as a command, it will then bring up the commandline version of a Taskmanager and output more information about the SVChosts like what SERVICES they actually run.

(Notice I say SERVICES, since the more SERVICES you run the more SVCHOSTS in your Taskmanager)

or type services.msc with the Run command and bring up the Services control panel...

You'd see what is running and in their properties how the services are started, etc...

a lot of trojan use SVCHOST.EXE to hide themself I would suggest look at this with procees explorer (usign gogle you can get a free version)