بهنام جان خوشحال میشم با این پروسس بیشتر آشنا بشم . مخصوصا فایلهایی که مانند این زود دچار الودگی میشن .

ضمنا من از این انگلیسی ها هم چیزی عایدم نشد . بیشتر توضیح بده . مرسی

svchost.exe is a system process belonging to the Microsoft Windows Operating System which handles processes executed from DLLs. This program is important for the stable and secure running of your computer and should not be terminated.

Note1: svchost.exe is a process registered as a backdoor vulnerability which may be installed for malicious purposes by an attacker allowing access to your computer from remote locations, stealing passwords, Internet banking and personal data. If unaccounted for, this process should be removed immediately.

Note2: svchost.exe is a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. This process is a security risk and should be removed from your system.

Note3: svchost.exe is a process belonging to Microsoft Service Host Process. This could also be a stealth monitoring software that sits in the background and tracks all activities such as keyboard input (including websites visited, passwords etc.) This information can be sent to third parties through email or ftp uploads. If you did not intentionally install this program make sure you remove it to protect your privacy.

--------------------------------------------------------------------------------

At startup, Svchost.exe checks the services part of the registry to construct a list of services that it must load. Multiple instances of Svchost.exe can run at the same time. Each Svchost.exe session can contain a grouping of services. Therefore, separate services can run, depending on how and where Svchost.exe is started. This grouping of services permits better control and easier debugging, but it also causes some difficulty for end users wishing to see the memory usage or vendor legitimacy of individual services and processes. End users in Windows XP Professional can run the following command at the system prompt to get a breakdown:

C:\>tasklist /svc /fi "imagename eq svchost.exe"

Due to being widespread among running processes, svchost.exe has long been a common disguise used by malware to hide its presence from the user. (One of the common trojan horses deceptively uses scvhost.exe). Users may then run tasklist with no arguments and match the reported PIDs with the previously shown Svchost instances. If memory usage appears abnormal, the user can look up the service names shown by their command on the internet to see if it is a known service or malware.

The Svchost.exe file is located in the %SystemRoot%\System32 folder. The main registry key involved at bootup is HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost (values in this key will show the user at least a partial list of the actual processes behind instances of svchost).

سلام ، ممنون از شما دوستان عزیز اجازه بدید به فرمایش آقای خان احمدی عمل كرده و در مورد این پروسس توضیح بیشتری بدم، البته اینها تجربیات خودم هست و شاید از دید علمی قابل قبول نباشد.

فایل explorer.exe یكی از قالب های اجرایی و اصلی ویندوز هست كه تمامی فایل های اجرایی در زمینه این فایل اجرا می شوند، taskbar, windows explorer, start menuو ... از جمله این فایل ها هستند.  شاید بسیاری از شما هنگام حذف یك فایل با پیغام اینكه این فایل هم اكنون در حال اجرا می باشد مواجهه شده باشید. می توانید پس از از كار انداختن فایل explorer.exe با استفاده از command prompt و دستور del فایل مورد نظر را به آسانی حذف نمایید. ضمنا برای refresh سیستم می تونید با استفاده از task manager یكبار فایل explorer.exe را از بین برده و دوباره آن را ایجاد نمایید.

به زودی در مورد Svchost.exe مطالبی می نویسم.

merci behnam joon . khoshhal misham dar mored bahseton bishtar tozih bedin