Home » Network Security » Process - Bad & Ugly » 

svchosts.exe

Process File: svchosts or svchosts.exe

Process Name: Svchosts

Description: Added to the system as a result of the Sdbot-N virus which is a backdoor Trojan that allows a remote user unauthorized access and control over the computer with IRC channels. The application runs in the background as a service process and attempts to connect to an IRC server and join a specific channel. The virus then listens on the IRC channel for specific commands and carries out the appropriate actions.


The good guy is svchost.exe - without the extra "s".  Read more about svchost.exe.

 


Mail this pageMail this page