Is the %windir%\system32\svchost.exe(3) a Windows Updater Application(2), or it belongs to “Windows System Applications”(1).these seting is configure when I installed CFP,but i feel doubted about it,can guys educate me?
can some guys tell me?
The classification of svchost into the “Updater” category has more to do with the privileges that it receives that way than the fact that it is a system application. System applications are given a blanket privilege to run any other .exe. With svchost, that is a bit too much freedom and opens up a hole in the protection. Thus, it was given a slightly reduced privilege set - the privileges found in the Updater policy.