shizuko Posted October 25, 2008 Posted October 25, 2008 (edited) several hours after I closed IE 7 still running in Task Manager:http://i36.tinypic.com/2ed8s5i.jpgthats odd... iexplorer.exe are running under svchost.exe ?please help. Edited October 25, 2008 by shizuko
Nerwin Posted October 25, 2008 Posted October 25, 2008 Thats interesting. I notice sometimes Firefox doesn't close and I had it running for almost a few days before I knew it. If its not bogging your system, I wouldn't worry about it. But it could just be stuck there and just end that task.If your computer is congested, you may wanna run Ccleaner (Crap Cleaner) and run Antivirus/Spyware software, And do maybe a defrag and a system clean up to get the system in a good clean state and see if that helps.I don't see much of a problem there, It may suppose to be there for some reason.Is it running in Windows Task Manager as well?
cluberti Posted October 25, 2008 Posted October 25, 2008 several hours after I closed IE 7 still running in Task Manager:http://i36.tinypic.com/2ed8s5i.jpgthats odd... iexplorer.exe are running under svchost.exe ?please help.svchost.exe is a service process - this means a SERVICE (services.msc) running on your box spawned iexplore.exe. I highly doubt it's the one you closed, and that is very suspicious. I would find out first which service belongs in that svchost.exe, and if you kill that iexplore.exe (from procmon) if it comes back...
Nerwin Posted October 25, 2008 Posted October 25, 2008 several hours after I closed IE 7 still running in Task Manager:http://i36.tinypic.com/2ed8s5i.jpgthats odd... iexplorer.exe are running under svchost.exe ?please help.svchost.exe is a service process - this means a SERVICE (services.msc) running on your box spawned iexplore.exe. I highly doubt it's the one you closed, and that is very suspicious. I would find out first which service belongs in that svchost.exe, and if you kill that iexplore.exe (from procmon) if it comes back...I dont know if I am right or wrong but can't Virus's and or Spyware run under/or as the svchost.exe?
shizuko Posted October 25, 2008 Author Posted October 25, 2008 Is it running in Windows Task Manager as well?yes... after I kill the process it never come back, and after reboot too, its ok now, but I wonder what happened.just performed a scan with spybot and nod32 and the system is clear, also the iexplorer.exe under svchost wasn't connected to any IP.
cluberti Posted October 25, 2008 Posted October 25, 2008 Sure - it's actually somewhat common. In essence, svchost.exe is just a stub binary for loading services as shared host processes, and any binary capable of running as a service that is on the system can use it if it knows how to make a quick registry entry to load under an svchost.exe binary. It's perfectly feasible to consider that this will be done by malicious software if it wants to hide (heck, I've seen HP printer drivers install services under svchost.exe binaries).
shizuko Posted October 25, 2008 Author Posted October 25, 2008 Sure - it's actually somewhat common. In essence, svchost.exe is just a stub binary for loading services as shared host processes, and any binary capable of running as a service that is on the system can use it if it knows how to make a quick registry entry to load under an svchost.exe binary. It's perfectly feasible to consider that this will be done by malicious software if it wants to hide (heck, I've seen HP printer drivers install services under svchost.exe binaries).understood ... thanks ... I'm more calm now
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now