It's true that a few viruses execute via this mechanism.

  But before you panic, understand that the mechanism exists to run some
legitimate OS services.  There's an OS utility program, RunDLL.exe, which
exists to run programs that are written in DLL form, and svchost.exe
performs a similar function for "services" written in DLL form.

  You should only really be concerned if there are more than 2 or 3
instances of svchost.exe running, or if one of them is using a lot of CPU
time.

  I've seen shareware/freeware utilities offered that claim to identify what
DLLs each instance of svchost.exe is running.  I haven't actually used any
of them.

David Gillett


On 2 Sep 2004 at 17:51, Phillip Williams wrote:

> I have noticed in my running processes (XP home) that there are several
> processes called svchost.exe running all the time (when online-haven't checked them
> off-line). I seem to remember seeing a statement on a forum that this is a
> virus related process. Is this true or is this a normal process?
>
> Also, is there a link for identifying processes that are running?
>
> Many thanks,
> Phillip Williams
>
>                The NOSPIN Group Promotions is now offering
>               Mandrake Linux or Red Hat Linux CD sets along
>              with the OpenOffice CD...  at a great price!!!
>              http://freepctech.com/goodies/promotions.shtml

               The NOSPIN Group Promotions is now offering
              Mandrake Linux or Red Hat Linux CD sets along
             with the OpenOffice CD...  at a great price!!!
             http://freepctech.com/goodies/promotions.shtml