Svchost virus is undoubtedly a type of malware that uses a function name similar to svchost.exe, but the main difference is that svchost.exe virus is located in every “C: Windows Temp svchost.exe”. Svchost.exe modifies the following subkey to run: HKEY_LOCAL_MACHINE Software Microsoft Windows CurrentVersion Run.