svchost/tasklist



Adrian Bailey
07-10-2005, 01:35 AM
I want to check that all my running svchosts are genuine, so I tried to run
tasklist in msdos, but it doesn't work. Any ideas?

Thanks, Adrian

Carey Frisch [MVP]
07-10-2005, 01:35 AM
For Windows XP Professional, use this Tasklist command:

Click Start, Run and type: CMD

Then type: tasklist /svc >c:\taskList.txt

The taskList.txt will contain the services list (launched by each Svchost process).

Note: Windows XP Home Edition does not have tasklist.exe.

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User
Microsoft Newsgroups

Get Windows XP Service Pack 2 with Advanced Security Technologies:
http://www.microsoft.com/athome/security/protect/windowsxp/choose.mspx

-------------------------------------------------------------------------------------------

"Adrian Bailey" wrote:

| I want to check that all my running svchosts are genuine, so I tried to run
| tasklist in msdos, but it doesn't work. Any ideas?
|
| Thanks, Adrian

David H. Lipman
07-10-2005, 01:35 AM
From: "Adrian Bailey" <dadge@hotmail.com>

| I want to check that all my running svchosts are genuine, so I tried to run
| tasklist in msdos, but it doesn't work. Any ideas?
|
| Thanks, Adrian
|

It's not a DOS program.

The problem is that the name SVCHOST.EXE is used by *many* forms of malware.

Malware files that use that name will NOT be in %windir%\system32

So if the file is located in %windir% or %windir%\sytem then it it has a very high
probability of being malware.

The best way to check is to scan the system using anti virus/anti malware software.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


svchost/tasklist