svchost.exe-应用程序错误(国外英语资料).doc

svchost.exe-应用程序错误(国外英语资料) Process file: svchost.dll Process name: Trojan.W32.Agent English description: Svchost.dll is a module which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. This process is a security risk and should be removed from your system. Process analysis: Svchost.exe is a system program that belongs to the Microsoft Windows operating system, which is used to execute DLL files. This program is very important for the normal operation of your system. Note: svchost.exe can also be a W32.Welchia.Worm virus that uses WindowsLSASS vulnerabilities to create buffer overflows that cause your computer to shut down. For more details, refer to: /technet/security/bulletin/ms04-011.mspx, the processs security level is recommended to delete immediately. Security level (0-5): N/A (N/A no danger, 5 most dangerous) Spyware: no! Ad software: no! Virus: no! Trojan horse: no! System process: no Application: no! Daemon: Yes Access: Yes Access to the Internet: Yes We all know Svchost.exe is a process system essential, many services are more or less will use it, but I think everyone knows, because of its particularity, clever hackers is definitely not miss, some time ago the Svchost.exe Trojan storm, we should remember it, but now there are still many machines are in possession of this trojan, because of its camouflage and system processes like Svchost.exe, so many people dont know, what is the process, which is a trojan Well, lets look at the Svchost.exe process in more detail 1., multiple services share a Svchost.exe process benefits and disadvantages The windows system is divided into two independent processes and sharing process, in the windows NT when only the server manager SCM (Services.exe) has a plurality of shared services, with the increase of built-in services, in Windows 2000 ms and the many services made sharing way, started by svchost.exe. Windows 20