Jump to content

Forking svchost into multiple processes


Recommended Posts

Posted

I have been reliably informed that it is possible to cause further instances of svchost on startup such that you can reduce the number of services run under a single executable instance by running them under a new one.

I got SO close to getting this to work, by adding a new reg value called audiosrv under HKLM/Software/Microsoft/WindowsNT/svchost and a new reg key under the same that was called audiosrv and given identical properties to netsvcs. I then removed the AudioSrv entry from the netsvcs multi and added it to the newly created audiosrv multi

After reboot I simply found that AudioSrv was not launched. Naively, I thought there was a chance that manually running svchost -k audiosrv might do the trick, but alas it did not.

Could someone please enlighten me as to what I may have done wrong. I feel I am missing one vital link to cause the audiosrv key to be checked and implemented under a new svchost instance at boot time.

Further information is available upon request (such as reg dumps etc)


Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...