|
jp10558
|
 |
« on: June 25, 2012, 08:21:59 AM » |
|
In Sysinternals Process Explorer, there is a very important function when you hover over a svchost.exe entry, instead of just telling you it's svchost, it has a service line that tells you what is actually running inside the svchost, or what's run it... Killswitch seems to lack this information, or at least I have no idea how to find it.
|