svchost/tasklist

  • Thread starter Thread starter Adrian Bailey
  • Start date Start date
A

Adrian Bailey

I want to check that all my running svchosts are genuine, so I tried to run
tasklist in msdos, but it doesn't work. Any ideas?

Thanks, Adrian
 
For Windows XP Professional, use this Tasklist command:

Click Start, Run and type: CMD

Then type: tasklist /svc >c:\taskList.txt

The taskList.txt will contain the services list (launched by each Svchost process).

Note: Windows XP Home Edition does not have tasklist.exe.

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User
Microsoft Newsgroups

Get Windows XP Service Pack 2 with Advanced Security Technologies:
http://www.microsoft.com/athome/security/protect/windowsxp/choose.mspx

-------------------------------------------------------------------------------------------

:

| I want to check that all my running svchosts are genuine, so I tried to run
| tasklist in msdos, but it doesn't work. Any ideas?
|
| Thanks, Adrian
 
From: "Adrian Bailey" <[email protected]>

| I want to check that all my running svchosts are genuine, so I tried to run
| tasklist in msdos, but it doesn't work. Any ideas?
|
| Thanks, Adrian
|

It's not a DOS program.

The problem is that the name SVCHOST.EXE is used by *many* forms of malware.

Malware files that use that name will NOT be in %windir%\system32

So if the file is located in %windir% or %windir%\sytem then it it has a very high
probability of being malware.

The best way to check is to scan the system using anti virus/anti malware software.
 
Back
Top