Users used Windows 2000/XP/Server2003 there are clear systems have 2 to 4 svchost process. However, under the svchost process in Vista up to 12. The svchost.exe is the same file path C: \ Windows \ System32 \ svchost.exe
So what kind of svchost process for the virus? In Vista antivirus partner(by http://www.computervi.com) in the "Security" tab for the UN on behalf of unknown safety. We also can observe the svchost process in the command line does not form a service group to start, while the corresponding Dll module path "safe" label for the UN, basically we can determine the virus.
article by citycool ,http://www.onlineypp.com
No comments:
Post a Comment