SVCHOST...where in windows is it?

I wanted to know where the file svchost.exe was supposed to be located in the windows xp pro directory... it seems i have a copy in my windows folder and in system32 but I doubt the legitimacy of the one in the windows folder... i think i stumbled upon an undetected trojan and alot of weird files have been apearing hidden in my windows folder... 3 including that one sent to NOD32 for testing... the svchost.exe file is 13.7k ... sounds fishy...

 

Hi Mal,

The legitimate svchost.exe file will be in your Windows System32 folder. If it is located anywhere else, then it will probably be a malware file.

Please follow the instructions over here: https://www.wilderssecurity.com/showthread.php?t=15913

Then create a folder on your C: drive and unzip HijackThis into it. Do not put HijackThis in the Temp folders or on your Desktop as backups there will be easily lost. Once HijackThis is in it's own folder, double-click the HijackThis.exe file to open the program, then click the "Scan" button. Once the scan is finished, the Scan button will change into a "Save Log" button. Save the log and open it in Notepad, then copy and paste ALL the contents of the log here in a post

Please do NOT fix anything in HijackThis until advised by an Expert. Most of what it lists will be harmless and even essential to your computer's operation.

Regards,

snap