Daily Blog #122: Question regarding Persistence via Svchost

Hello Reader,
              Harlan Carvey had a question from this weeks answer:

"I have a question about the description of the SvcHost key, particularly when compared to what's listed here:
http://support.microsoft.com/kb/314056

I'm not sure that the SvcHost is, in itself, a persistence mechanism, as without the service existing beneath the Services key, the entry is just a place holder."

The description in the winning entry for this key was:

"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost

This registry key contains a list of processes that should be run as services under the svchost.exe program.  These will be automatically loaded by the operating system so this is a prime target for malware executables."

The description from the MSDN documentation states:

"The Svchost.exe file is located in the %SystemRoot%\System32 folder. At startup, Svchost.exe checks the services part of the registry to construct a list of services that it must load. Multiple instances of Svchost.exe can run at the same time. Each Svchost.exe session can contain a grouping of services. Therefore, separate services can run, depending on how and where Svchost.exe is started. This grouping of services allows for better control and easier debugging.

Svchost.exe groups are identified in the following registry key:

HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Svchost

Each value under this key represents a separate Svchost group and appears as a separate instance when you are viewing active processes. Each value is a REG_MULTI_SZ value and contains the services that run under that Svchost group. Each Svchost group can contain one or more service names that are extracted from the following registry key, whose Parameters key contains a ServiceDLL value:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Service"

From looking at the key within my system it would appear as though the service is added to a group that is tored as a  keyvalue under svchost. What I don't know and what I want to test is can you add an item to the grouping list without also defining it as a service separately or will it execute whatever is named that in the local path.  I will test this and let you know tomorrow!

Merawat Tali Pusar Bayi dengan Metode Medis

Merawat Tali Pusar Bayi penting dilakukan
untuk menghindari infeksi yang tentu akan membahayakan kesehatan bayi. Tali
pusar bayi setelah persalinan dipotong dan dibalut dengan kain kasa, dan
setelah 7 – 14 hari akan lepas dengan sendirinya. Selama sebelum terlepas
tersebut tali pusar harus di rawat, agar tidak menyebabkan infeksi.





Tali pusar adalah jaringan yang menghubungkan
plasenta (

Gerakan Senam Ibu Hamil di Rumah Usia 6-8 Bulan

Gerakan Senam Ibu Hamil saat usia kehamilan 8 bulan, dilakukan
untuk mengisi kegiatan saat di Rumah. Pada usia kehamilan ini, biasanya mereka
akan lebih banyak menghabiskan waktu dirumah. Apabila tidak melakukan
aktifitas, tentu akan menimbulkan rasa bosan bahkan depresi pada ibu hamil. Hal
ini tentu sangat tidak baik untuk kesehatan janin dan calon ibu.



Untuk mengisi waktu luang tersebut,

MINDFUL HEALTH, MINDFUL FUN, AND KALE FOR KIDS

WELLNESS WEDNESDAYS

  

"The choices we make matter."  -- Nancy Heinrich


How many times have you said, “I wish I knew this 20 years ago?”  or “Why did I ever start (fill in the bad habit)?”  When I was a kid growing up in Sacramento, California I ate lots of vegetables but I never ate asparagus, brussels sprouts, and kale.  Now, I love them and can’t get enough of them!

BRUSSELS SPROUTS!!!  

VEGETABLES AND FRUITS FOR JUICING at a recent GHK program! 

JAMMING SALMON CAKES FROM A
RECENT GHK KIDS IN THE KITCHEN PROGRAM!

Demonstration of MINDFUL FUN at a
recent GHK Kids in the Kitchen program at Gifford Youth Activity Center, Vero Beach, FL)
(yours truly in the background overseeing the fun!)

Mindful fun at a recent GHK event at
Boys and Girls Clubs of Indian River County, FL

 The choices we make every day matter.  What we learn impacts our decisions.  How much we know about a subject influences the choices we make.  Our mind is the most powerful tool in our health tool kit.  That’s what mindful health is all about.  Be mindful, be healthy!

The Growing Healthy Kids (GHK) movement specializes in mindful fun as the vehicle to arrive at our destination of mindful health.  Kids in the GHK education programs learn about foods firsthand that create health because they talk with the farmers, then they become the farmers, the chefs, and the nutritionists.  We love celebrating each child who makes the mindful health transformation from “I don’t eat that” to “Can I have seconds?”  and “Can I take some of that home to my parents?”  after attending a GHK Kids in the Kitchen program. 

Mindfulness is simply a direct, conscious choice to make a deliberate decision. Think of mindfulness as a strategy for bringing one’s complete attention to the present experience on a moment-to-moment basis.  It is a state of mind that creates prosperity.  I believe that to be healthy is to be prosperous.   By being mindful of what we choose to eat and drink, we make the choice to stay in balance.  Think about what you are eating and why you are eating.  I often ask clients to keep a journal of their emotions ("how were you feeling when you ate this meal/snack/binge food item") when they are seeking solutions for helping their children and themselves get to healthier weights.  They are given the assignment of recording what they eat for one week and also noting how they were feeling at each meal or snack.  What emerges is self-evident:  “I was worried about getting written up at work,” "I was bored,” or “I just had a fight with my boyfriend”. 

Overeating is not productive and does not result in prosperity.  Overindulging in desserts and refined sugars leads to inflammation within the body and weight gain.  Why is this important?  The body is not designed to carry around an extra 50 or 100 pounds.  If you need inspiration, check out CNN’s FitNation series of interviews with people who have made the effort to shed the weight and have gotten the results.  Your attitude can affect your decisions.  Think about what you want and think about why you want it. Then go write in down.  Be specific with the “why”.  Use what we call SMART goals:  Specific-Measureable-Achievable-Realistic-Time-Specific. 

Parents, this message is for you:  Use mindfulness and get yourself fit.  Be a better role model for your children.  The world does not need more overweight children or children with diabetes.  It also does not need parents who are overweight.  Be mindful of what you eat.  Eat with the intention of being healthy every day.  As we like to say in the Growing Healthy Kids movement, “eat rainbows”.  Engage in mindful fun, or as my friend, Ronnie Hewitt, former CEO of Boys and Girls Clubs of Indian River County, used to say, "Fun with a purpose!"  Twenty years from now your kids will thank you!  Heck, they just might be partial to asparagus, brussels sprouts and kale.

In gratitude,

Nancy Heinrich

Growing Healthy Kids, Inc. 

... We're over at templefootballforever.wordpress.com ... do not leave comments here. .. just leaving this site up for advertising purposes ... please update your bookmarks ... thanks .. [caption id="attachment_6148" align="aligncenter" width="250"] James Casey while playing quarterback for the Rice Owls.[/caption]

All of this talk about James Casey being the "emergency quarterback" of the Philadelphia Eagles got me to looking up Casey's credentials as a potential quarterback should both Michael Vick and Matt Barkley go down on Sunday. Since Nick Foles already is out with a concussion, it looks like Casey would not be in over his head as a quarterback because he was more than a serviceable at that position while playing for the Owls. The Rice Owls.

Call James Casey the Chris Coyer of Rice. Or, if you will, call Chris Coyer the James Casey of Temple. Very similar skill sets. Very similar-type players.

[caption id="attachment_6149" align="alignleft" width="300"] Temple's Chris Coyer catching at a halfback option pass from Jalen Fitzpatrick for a first down in front of Deiontrez Mount and Keith Brown. (See, trick plays do work.)[/caption]

Casey, like Coyer, made a position change his senior year and, like Coyer, moved from quarterback to tight end. Unlike Coyer, though, the coaching staff at Rice used Casey wisely as he became the first player in the history of the NCAA to do this: Throw a touchdown, run for a touchdown and catch a touchdown all in the same game. Casey did this twice for the Owls.

Casey was second in the country in 2008 with 111 receptions, which set a Conference-USA record. He caught 13 touchdowns, rushed for six more and threw a pair. Those are the kind of stats I thought Coyer could have put up if he was targeted enough in the Temple offense this season. That's not going to happen, but that doesn't mean he can't throw for a touchdown, run for a touchdown and pass for a touchdown in one or two or more of the remaining Temple games.

Since there are five games left, I'd like to see Coyer do this twice, maybe three times, for Temple. Heck, five times would be nice but I realize I've been spitting into the wind all season on this issue. Coyer is a pretty talented player. Those of us who have seen him all these years, even his one or two detractors (don't get those people, but they are out there), have to agree on that. He can run. He can throw. He can catch. He can block. I realize Coyer is needed to block now more than ever, but I would like to see some plays to free him up to throw the ball out of non-Wildcat formations. On those plays, Chris Parthemore (see his perfect seal block in the slideshow below) can be used as a blocking tight end. Since there currently are no plays in the Marcus Satterfield playbook for the tight end reverse, pitch and throw downfield, maybe line Coyer up as a fullback, have him rip off a few runs to set up a toss pitch option pass downfield. [caption id="attachment_6153" align="alignright" width="238"] Great play for Coyer, running to the left, not the right as shown here.[/caption]

Too much to ask? Yeah, probably.

I asked Chris after the game on Saturday if the tight end reverse, toss and throw downfield off it was in the playbook and he said no.

My immediate reaction was to say a four-letter word preceded by the word "Oh." (Sorry, Mrs. Coyer.)

There should be a way, though, to have Coyer run the a couple of plays out of the fullback position, establish himself as a threat running the ball inside the tackles and then quick toss and have him throw the ball down the field. I'm 90 percent certain you can get a safety to bite with that kind of setup.

It worked a few times for the Rice Owls with James Casey.

It can also work for the Temple Owls with Chris Coyer.