How does Win7 determine if Svchost.exe is a virus

1, CTRL+DEL+ALT, open the task manager, click on the "Process" tab, you will find that there are a lot of Service .exe programs in your computer. In the end, is there any poisoning on the computer? How do we judge it?

2. Right-click on a Svchost.exe program and select “Attributes” from the pop-up menu.

3, in the "Properties" window, you can see its location: C: WindowsSystem32 If not in this folder, it is likely that the computer is poisoned.

4, click on the "Details" tab, you will clearly see the text version, product name and other related information, if this part of the information is nothing, you should also be careful.

5, some Service.exe*32 process you will find in C: WindowsSysWOW64, in fact, SysWow64 folder, is 64-bit Windows, used to store 32-bit Windows system files. Everyone can rest assured.

6, you can also enter CMD in the "Run" dialog box (shortcut Win + R). In the window, enter the “tasklist/svc” command, after the carriage return, you will see the list of the figure, if the Service.exe display "lack", the possibility of poisoning is also very large.

7. How to quickly view the path of all Service .exe processes? You can also enter wmic in the “Run” dialog box (shortcut Win+R). Enter “process” in the window to quickly view the path of all Service .exe processes. Not only that, but you can also see which programs are using the process.

8. If you find a suspicious process in the above operation, you can use anti-virus software to perform a comprehensive anti-virus.