On: Smashing the Limits: Installing Windows XP in DOSB...

[kimixa]

From what I remember a single svchost.exe process instance could be handing multiple "services" - you could see the mapping of service to PID in the Services, and there wasn't a 1:1 relationship.

So did you actually know what services were running based on the processes to support the belief that "there were no other processes acting in the background"?

[tetris11 → kimixa]

But they were signed windows services, I didn't have to worry about any nefarious processes coming from the OS itself (at least, not back then...)

[andrewshadura → tetris11]

There was no signing at that time.