svchost hooking?

  • Thread starter Thread starter Martin Spencer-Ford
  • Start date Start date
M

Martin Spencer-Ford

Hi guys - do you have any recomendations for software that allows you to see
what processess have hooked into svchost ??

Apprciate any advice given

Martin Spencer-Ford
(TpwUK)
 
Martin Spencer-Ford said:
Hi guys - do you have any recomendations for software that allows you to see
what processess have hooked into svchost ??
Click to expand...

Microsoft's Windows 2000 support tools has a command line utility
called "tlist". "tlist /s" will show what each instance of svchost is
responsible for. There is a similar one for XP. It might be called
"tasklist".

A fuller featured GUI utility is "Process Explorer" (free) from:
http://www.sysinternals.com
 
Ant said:
Microsoft's Windows 2000 support tools has a command line utility
called "tlist". "tlist /s" will show what each instance of svchost is
responsible for. There is a similar one for XP. It might be called
"tasklist".

A fuller featured GUI utility is "Process Explorer" (free) from:
http://www.sysinternals.com
Click to expand...
Yeah tried the Prcess Explorer - couldnt get on with it, too much detail if
you like.
TaskList is indeed the XP command, handy for times when you cant get into
the gui TaskManager

Thanks Ant

TpwUK
 
Yeah tried the Prcess Explorer - couldnt get on with it, too much
detail if you like.
Click to expand...
TaskList is indeed the XP command, handy for times when you cant get
into the gui TaskManager
Click to expand...

PE is about as simple as it gets. You put the thing in Show Lower Pane
and Show all DLL(s) and it will show all exe(s), DLL(s) and whatnot
hidden processes that are running with a given process. It don't get no
simpler than that.

Duane :)
 
Duane Arnold said:
PE is about as simple as it gets. You put the thing in Show Lower Pane
and Show all DLL(s) and it will show all exe(s), DLL(s) and whatnot
hidden processes that are running with a given process. It don't get no
simpler than that.

Duane :)
Click to expand...

My mistake - thats not the application I thought it was, So thanks for
another good link Ant, and thanks to Duane for implying i was thick and
forcing me to make sure I was mistaken!!

Thanks Guys
TpwUK
 
Back
Top