SVCHOST processes query

Greetings all,

Just wondering, can anyone tell me exactly how many occurrances of SVCHOST.EXE I should have running???
As of writing this I have a total of 5 of these running. Three of them are running under the user name 'SYSTEM', one is under 'NETWORK SERVICE', and another under 'LOCAL SERVICE'.
WinXP Pro.
Thanks for any guidance here; seems like a few too many to me.?

Please Register or Log in to view the hidden image!

 

Log in or Sign up to hide all adverts.

I think it is related to keyboard, monitor and stuff like that.

Not sure really. Just know that you should not shut them down

Please Register or Log in to view the hidden image!

No need to test, i can tell you what happens.

Please Register or Log in to view the hidden image!

 

Log in or Sign up to hide all adverts.

Since your Running WinXP Pro you can use the Commandline to pull up more information:

First open up a command dialogue, usually typing CMD in the RUN box is the quickest method.

Once thats up type, Tasklist /svc as a command, it will then bring up the commandline version of a Taskmanager and output more information about the SVChosts like what SERVICES they actually run.

(Notice I say SERVICES, since the more SERVICES you run the more SVCHOSTS in your Taskmanager)

 

Log in or Sign up to hide all adverts.

or type services.msc with the Run command and bring up the Services control panel...

You'd see what is running and in their properties how the services are started, etc...

 

a lot of trojan use SVCHOST.EXE to hide themself I would suggest look at this with procees explorer (usign gogle you can get a free version)