Page 1 of 2 12 LastLast
Results 1 to 10 of 12

Thread: svchost.exe

  1. #1
    Smith's Avatar Since 1989.. BT Rep: +1
    Join Date
    Jun 2003
    Location
    in a plane, high as fuck
    Posts
    5,538
    What is it and why is it(does it):

    -taking up 13-18mb of my memory
    -stop my sound in my games when i end it

    Do i need it?

  2. Software & Hardware   -   #2
    peat moss's Avatar Software Farmer BT Rep: +15BT Rep +15BT Rep +15
    Join Date
    May 2003
    Location
    Delta B.C. Canada
    Posts
    10,547
    If you spelt it right yes .


    Process File: svchost or svchost.exe
    Process Name: Microsoft Service Host Process

    Description:
    svchost.exe is a system process belonging to the Microsoft Windows Operating System which handles processes executed from DLLs. This program is important for the stable and secure running of your computer and should not be terminated.

    Note: svchost.exe is a process which is registered as the W32.Welchia.Worm. It takes advantage of the Windows LSASS vulnerability, which creates a buffer overflow and instigates your computer to shut down. To see more information about this vulnerability please look at the following Microsoft bulletin: http://www.microsoft.com/technet/sec.../ms04-011.mspx

    This is a registered security risk and should be removed immediately. Please see additional details regarding this process
    Last edited by peat moss; 07-08-2005 at 11:01 PM.

  3. Software & Hardware   -   #3
    orcutt989's Avatar Blargh
    Join Date
    Dec 2003
    Location
    States
    Posts
    2,186
    Quote Originally Posted by peat moss
    If you spelt it right yes .


    Process File: svchost or svchost.exe
    Process Name: Microsoft Service Host Process

    Description:
    svchost.exe is a system process belonging to the Microsoft Windows Operating System which handles processes executed from DLLs. This program is important for the stable and secure running of your computer and should not be terminated.

    Note: svchost.exe is a process which is registered as the W32.Welchia.Worm. It takes advantage of the Windows LSASS vulnerability, which creates a buffer overflow and instigates your computer to shut down. To see more information about this vulnerability please look at the following Microsoft bulletin: http://www.microsoft.com/technet/sec.../ms04-011.mspx

    This is a registered security risk and should be removed immediately. Please see additional details regarding this process


    That is just confusing. Why did you put that thing about the worm in there?

  4. Software & Hardware   -   #4
    peat moss's Avatar Software Farmer BT Rep: +15BT Rep +15BT Rep +15
    Join Date
    May 2003
    Location
    Delta B.C. Canada
    Posts
    10,547
    Because it could be either , I don't know from what he posted .


    Here is a link:

    http://www.iamnotageek.com/a/Svchost.exe.php


    Edit : Your probably right I didn't explain it very well. If he shuts it down it kills a dll (his sound) . The memory usage seems low so probably not a worm but depending where its located on his computer, and what processes its using it can be many things malware included. I was just pointing that out . Sorry for the confusion ,sometimes bad advice is worse than no advice, I'll remember that in future posts .
    Last edited by peat moss; 07-09-2005 at 10:07 PM.

  5. Software & Hardware   -   #5
    orcutt989's Avatar Blargh
    Join Date
    Dec 2003
    Location
    States
    Posts
    2,186
    Quote Originally Posted by peat moss
    Because it could be either , I don't know from what he posted .


    Here is a link:

    http://www.iamnotageek.com/a/Svchost.exe.php


    Edit : Your probably right I didn't explain it very well. If he shuts it down it kills a dll (his sound) . The memory usage seems low so probably not a worm but depending where its located on his computer, and what processes its using it can be many things malware included. I was just pointing that out . Sorry for the confusion ,sometimes bad advice is worse than no advice, I'll remember that in future posts .

    Wait so the worm can name itself the same exact thing as the legitimate process?

  6. Software & Hardware   -   #6
    weenietot
    Guest
    If you have xp-service pack-2 your protected against the worm.....so microsoft says

  7. Software & Hardware   -   #7
    peat moss's Avatar Software Farmer BT Rep: +15BT Rep +15BT Rep +15
    Join Date
    May 2003
    Location
    Delta B.C. Canada
    Posts
    10,547
    Quote Originally Posted by weenietot
    If you have xp-service pack-2 your protected against the worm.....so microsoft says

    All the more reason to update security patches . Welcome by the way .

    @orcutt989, they can be altered slightly too just to confuse us, see it all the time on this forum. Its why I asked about the spelling ,oldest trick in the book.
    Last edited by peat moss; 07-10-2005 at 04:29 PM.

  8. Software & Hardware   -   #8
    Al Kaholic's Avatar n00b
    Join Date
    Jul 2005
    Location
    In The Bottom Of A Bottle
    Posts
    8
    Quote Originally Posted by TheCanuk
    What is it and why is it(does it):

    -taking up 13-18mb of my memory
    -stop my sound in my games when i end it

    Do i need it?
    There are multiple instances of the svchost.exe process running
    on your computer at any given time.

    You're ending the Windows Audio service (AudioSrv, one of many sevices
    that depend on the svchost.exe) in Task Manager,when you kill the
    process.

    Yes, in this instance you need to leave the process running. Be careful
    mucking around, with ending an process and not knowing it's function.

    Try using Google, and find out what services you can turn off safely.There
    are numerous sites that will help you. Use your Microsoft Management Console (located in Administrative Tools) to stop services,and not
    msconfig.

    Good luck.
    Last edited by Al Kaholic; 07-11-2005 at 05:07 AM.

  9. Software & Hardware   -   #9
    Smith's Avatar Since 1989.. BT Rep: +1
    Join Date
    Jun 2003
    Location
    in a plane, high as fuck
    Posts
    5,538
    So leave it running?

  10. Software & Hardware   -   #10
    Snee's Avatar Error xɐʇuʎs BT Rep: +1
    Join Date
    Sep 2003
    Location
    on something.
    Age
    44
    Posts
    17,985
    Quote Originally Posted by Al Kaholic
    Try using Google, and find out what services you can turn off safely.There
    are numerous sites that will help you. Use your Microsoft Management Console (located in Administrative Tools) to stop services,and not
    msconfig.

    Good luck.
    I think it's be to run->"services.msc" and modify any settings from there.

    It's harder to shut down RPC when you do that, according to Black Viper.



    If someone doesn't know wtf they are doing, that's a good thing.



    And Canuk: leave it running, all right.

    Have a look at this, if you want to know what is what when it comes to windows processes.

    -> http://www.theeldergeek.com/services_guide.htm#Services
    Last edited by Snee; 07-11-2005 at 04:08 PM.

Page 1 of 2 12 LastLast

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •