Shouldn't it just be under C:\WINDOWS\system32?
Last edited by Hellogoodsir (2006-10-02 17:13:49)
Prefetch is some precaching/loading thing Windows does. If you look at it, it's not just SVCHOST.exe but some other crap at the end.
No. That's the prefetch file you're looking at. Just google it bro. It's tough to explain all that stuff. It's supposed to be there
edit: Ex beat me to it lol
edit: Ex beat me to it lol
Last edited by King_County_Downy (2006-10-02 17:20:49)
Sober enough to know what I'm doing, drunk enough to really enjoy doing it
You may have a virus mate.What is svchost.exe? Is svchost.exe spyware or a virus? Process name: Host Process for Services
Product: Windows
Company: Microsoft
File: svchost.exe
Security Rating:
"Svchost.exe" (Generic Host Process for Win32 Services) is an integral part of Windows OS. It cannot be stopped or restarted manually. It manages 32-bit DLLs and other services. At startup, Svchost.exe checks the services portion of the registry to construct a list of services that it needs to load. In normal conditions multiple instances of Svchost.exe run at the same time. Each Svchost.exe session can contain a grouping of services, so that separate services can be run depending on how and where Svchost.exe is started. This allows for better control and debugging. More info More info
Note: The svchost.exe file is located in the C:\Windows\System32 folder. In other cases, svchost.exe is a virus, spyware, trojan or worm! Check this with Security Task Manager.
Virus with same name:
Symantec Security Response - W32.Welchia.Worm
Symantec Security Response - W32.Assarm@mm
McAfee - W32/Jeefo
http://www.neuber.com/taskmanager/proce … t.exe.html
Last edited by R3v4n (2006-10-02 17:25:23)
~ Do you not know that in the service … one must always choose the lesser of two weevils?
I have a few running right now too.
ok, so mines legit. it says it can have many instances of it running at one time.
And for the post starter. I do really think that thats not sopposed to be their, it should be in your windows root folder and not anywhere else.
ok, so mines legit. it says it can have many instances of it running at one time.
And for the post starter. I do really think that thats not sopposed to be their, it should be in your windows root folder and not anywhere else.
Last edited by lavadisk (2006-10-02 17:29:53)
R3v4n wrote:
In normal conditions multiple instances of Svchost.exe run at the same time.
Sober enough to know what I'm doing, drunk enough to really enjoy doing it
Ok I see. Well, I was just a little curious because it said it was created Sept 17 06. I googled it and what R3v4n posted prompted me to get a second opinion. Thanks guys
Use hijackthis.exe and post results here