2 ms·
From what I remember a single svchost.exe process instance could be handing multiple "services" - you could see the mapping of service to PID in the Services, a
by kimixa 2y ago
From what I remember a single svchost.exe process instance could be handing multiple "services" - you could see the mapping of service to PID in the Services, and there wasn't a 1:1 relationship.
So did you actually know what services were running based on the processes to support the belief that "there were no other processes acting in the background"?
- tetris11 2y agoBut they were signed windows services, I didn't have to worry about any nefarious processes coming from the OS itself (at least, not back then...)
- andrewshadura 2y agoThere was no signing at that time.