|
Re: svchost.exe
If you select Properties and click on the Version tab, if the file's legit it'll have the value 'Microsoft Corporation' next to 'Company Name' and there'll be a copyright message. The file will identify itself as 'Generic Host Process for Win32 Services'. If there's nothing there and/or the file is anywhere else but the Windows\System32 folder, it's a worm.
__________________
"People tend to confuse the words 'new' and 'improved'."
- Agent Phil Coulson, S.H.I.E.L.D.
WINDOWS 11/UK 'GOVERNMENT', ANYONE?!
|