Windows 服务可以从 services.exe 以外的其他东西生成吗?
在 _EPROCESS
结构中,Inherited From Unique Process
字段用于 alg.exe
、svchost.exe
等服务, spoolsv.exe
始终指向 services.exe
。所以,这是我的问题。
1) 是否可以从非 services.exe
进程生成服务
2) services.exe
可以生成非服务流程?
in the _EPROCESS
structure, the Inherited From Unique Process
field for services like alg.exe
,svchost.exe
,spoolsv.exe
always points to services.exe
. So, here are my questions.
1) Can a service be spawned from non-services.exe
process
2) Can services.exe
spawn a non service process?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
Services.exe 是服务控制管理器,因此它很可能启动所有服务,但这可能无法保证。也可能无法保证 services.exe 不会生成其他进程。事实上,这似乎是可能的。
也许如果您说出您想知道的原因,我们也许能够帮助解决更广泛的问题。
Services.exe is the service control manager, so it is likely that it starts all services, but this is probably not guaranteed. It is also probably not guaranteed the services.exe doesn't spawn other processes. In fact it seems likely that it might.
Perhaps if you said why you want to know, we might be able to help with the wider problem.