Fog Creek Software
Discussion Board

I don't know if this is really the right or best place to ask, but does anyone know if this is a virus, and if so can anything be done with it. If I search for svchost.exe I have this file in C:WINDOWS\PREFETCH as well as the proper scvhost.exe in C:\WINDOWS\SYSTEM32. If I search on google with "" as the search all I seem to get is loads of foreign language sites with it on. Any info would be very gratefully received.

Ian Smith
Thursday, February 12, 2004

The prefetch directory contains data that Windows XP prefetches as bootup to increase bootup time.  In this case, it's prefetching svchost.exe.

Nothing to worry about.

Almost Anonymous
Thursday, February 12, 2004

"bootup to increase bootup time"

So if I delete them will it boot up faster?  :)

Thursday, February 12, 2004

svchost is "service host", which runs services. i do not recommend to delete this file. but you can try :)

Thursday, February 12, 2004

He's talking about deleting the prefetch files, which some people claim improves boot-up speed.

Nate Silva
Thursday, February 12, 2004

And I was only making a small joke - I think he meant *decrease* boot up time.

Thursday, February 12, 2004

Yeah, I meant decrease...

Almost Anonymous
Friday, February 13, 2004

does this pf file always exist?when does it get created?coz i had it on my system till yesterday and  now it's not there anymore!!

Sunday, February 15, 2004

i had a pop up today from my virus real time scan and it said it was a virus and it was located in the c/windows/system32/drives and the name of the virus was w32.welcha. b or something like that but when i go to use the tool to get it out it says its not there so i have no clue but i did a search for the svchost.exe and there are only 2 of them there and one was just created today 2/15/2004 so i was also wondering if i could deleate that one but not the other one can anyone help?

Monday, February 16, 2004

There should only be one Svchost.exe and it should be located in your "windows\system32" directory if there's another svchost.exe in another location m8 likely hood is it's a virus.

run your virus scanning software over it see if it flags or delete it no need for two versions m8 and the true svchost.exe is located on your search path thus no harm done in deleting the foriegn one.


Martin Mack

Martin Mack
Sunday, April 25, 2004

i deleted mine yesterday, it was in the same diretorie, and as i had big troubles with a svchost.exe - virus some weeks ago i was afraid it is that m.....f..... virus again. Now i cant connect to the internet or send emails......

Looks like it wasn´t a virus. But strange that most of the guys here say that this file isnt very importnant.

Maybe only my internet provider is down at the moment.

el Fazerinjo Diablo

Fazerinjo Diablo
Thursday, May 13, 2004

i believe that SVCHOST.EXE can hold a virus because when i went to look at the security part of the program there was an unidentified user that had full access to the program... i also had 2 copies...and one was named

Thursday, June 24, 2004

That was my virus log :

The file "C:\WINNT\system32\wins\svchost.exe" is deleted.

W32.Welchia.Worm has been successfully removed
from your computer!

Here is the report:

The total number of the scanned files: 33708
The number of deleted files: 1
The number of repaired files: 0
The number of viral processes terminated: 0
The number of viral services deleted: 0
The number of registry entries fixed: 0

Wednesday, June 30, 2004

*  Recent Topics

*  Fog Creek Home