Svchost Process Analyzer

Over time virus writers have become creative and use the best cloaking techniques to hide the footprint of their malicious software. Svchost.exe is one of most noticeable Windows processes that show up in the start manager. This critical process is used to kick start Windows DLLs and their can be multiple instances of the process running at the same time. Many virus authors take note of the importance of this process and cloak their malicious process to appear as Svchost.exe. In order to prevent such programs from compromising your system you can use the Svchost Process Analyzer 1.1.0.44 to analyze the process instances running on your system and detect any anomaly.

When you launch the Svchost Process Analyzer 1.1.0.44 tool you are greeted with a very basic interface with limited options. Its interface is essentially split into two parts. In the top half all the Svchost.exe instances that are running are showcased. Now when select any of those processes, the details for the same are displayed in the bottom half. One needs to look carefully in the details block and look items which are not accompanied by the green tick mark. An absence of green mark indicates a non Microsoft process and should be immediately analyzed. On the technical front, the tool sporting a compact setup file size, does not even needs to be installed. It barely consumes any system resources and does not even modify the registry. It can work with nearly all Windows OS iterations in vogue including 64 bit editions too. Most importantly the tool is complete free of any adware and does not cost a dime.

On account of its effective scanning of malware which may masquerade as a Svchost.exe instance, the Svchost Process Analyzer 1.1.0.44 is marked with a score of three rating stars.

Svchost Process Analyzer is a quick and easy freeware product that inspects your Svchost.exe process. The Svchost.exe process, which is visible in Windows Task Manager, is often misused by spyware or network worms in order to conceal their activities. Svchost Process Analyzer recognizes these suspicious processes, which hide within an Svchost instance. An example is the infamous Configer (or Conficker) worm. The genuine Svchost.exe is an important system process that is shipped with Windows 7, Vista, XP and is located in the C:\Windows\System32 folder. When a Windows computer boots, Svchost.exe executes dynamic link libraries (DLLs) found in the Windows Registry as services. There can be several instances of Svchost.exe running at the same time. The process description is "Generic Host Process for Win32 Services." This means that other services use Svchost to run their own executables as Svchost instances. Trojans and other sorts of malware slip into the Svchost process and work through it. Since Svchost is an important Windows process, even malicious Svchost activities are often not blocked by currently available security software and firewalls.

Svchost Process Analyzer also detects trojan horses, worms or other malware with slightly altered names, such as svhost.exe, scvhost.exe or _svchost.exe.