Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

5.2.3790.3959 (srv03_sp2_rtm.070216-1710) 0.76%
5.1.2600.5512 (xpsp.080413-2108) 60.31%
5.1.2600.5512 (xpsp.080413-2108) 2.67%
5.1.2600.5512 (xpsp.080413-2108) 0.76%
5.1.2600.5512 (xpsp.080413-2108) 6.11%
5.1.2600.5512 (xpsp.080413-2108) 3.05%
5.1.2600.5512 (xpsp.080413-2108) 0.38%
5.1.2600.5512 (xpsp.080413-2108) 1.91%
5.1.2600.5512 (xpsp.080413-2108) 0.76%
5.1.2600.5512 (xpsp.080413-2108) 0.38%
5.1.2600.5512 (xpsp.080413-2108) 1.53%
5.1.2600.5512 (xpsp.080413-2108) 0.76%
5.1.2600.5512 (xpsp.080413-2108) 0.38%
5.1.2600.5512 (xpsp.080413-2108) 0.76%
5.1.2600.5512 (xpsp.080413-2108) 0.38%
5.1.2600.5512 (xpsp.080413-2108) 0.38%
5.1.2600.3311 (xpsp.080212-0003) 0.76%
5.1.2600.3300 (xpsp.080125-2027) 0.38%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 14.50%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 0.76%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 0.38%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 0.38%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 0.38%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 0.38%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 0.38%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
SetThreadToken, OpenProcessToken, UnregisterIdleTask, RegisterIdleTask, RegDeleteValueW, RegConnectRegistryW, ConvertSidToStringSidW, RegQueryInfoKeyW, RegEnumValueW, LookupAccountNameW, EqualSid, DeleteAce, GetSecurityDescriptorDacl, IsValidAcl, GetAclInformation, GetLengthSid, AddAccessAllowedAce, GetAce, AddAccessDeniedAce, SetSecurityDescriptorDacl, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, RegCreateKeyExW, MakeAbsoluteSD, InitializeSecurityDescriptor, InitializeAcl, GetTokenInformation, RegisterServiceCtrlHandlerExW, RegNotifyChangeKeyValue, RegSetValueExW, SetServiceStatus, RegOpenKeyExW, RegQueryValueExW, RegCloseKey, OpenThreadToken, MakeSelfRelativeSD, IsValidSecurityDescriptor
kernel32.dll
QueryPerformanceCounter, FindFirstChangeNotificationW, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetSystemDefaultUILanguage, GetUserDefaultUILanguage, GetLocalTime, SetLastError, LoadLibraryExW, GetSystemDirectoryW, GlobalUnlock, GlobalLock, GlobalAlloc, GetUserDefaultLCID, GetTimeZoneInformation, GetModuleFileNameW, DeleteTimerQueueTimer, UnregisterWaitEx, CreateTimerQueueTimer, RegisterWaitForSingleObject, GetCurrentThread, FindCloseChangeNotification, LocalFree, OpenProcess, GlobalFree, Sleep, FindNextChangeNotification, lstrlenW, DisableThreadLibraryCalls, CreateEventA, GetLastError, WaitForMultipleObjects, SetEvent, HeapDestroy, DeleteCriticalSection, InitializeCriticalSection, EnterCriticalSection, CreateProcessW, WaitForSingleObject, TerminateProcess, CloseHandle, LeaveCriticalSection, ExpandEnvironmentStringsW, GetTickCount
msvcrt.dll
DllMain
netapi32.dll
NetLocalGroupAddMembers, NetLocalGroupDel, NetLocalGroupAdd, NetLocalGroupGetInfo, NetApiBufferFree, NetLocalGroupGetMembers, NetLocalGroupDelMembers
ntdll.dll
NtQueryInformationProcess
ole32.dll
StringFromGUID2, CoRegisterClassObject, CoRevokeClassObject, CoUninitialize, CoCreateInstance, CoGetCallContext, CoInitializeEx
rpcrt4.dll
I_RpcBindingInqLocalClientPID
user32.dll
LoadStringW
winsta.dll
WinStationSetInformationA

PCHSVC.dll

Microsoft PCHealth Service Holder by Microsoft

Remove PCHSVC.dll
Version:   5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
MD5:   46cc247121d335e19b9695a5f24ce75f
SHA1:   4ca7ebe893feb67ceeeb721511cffe518da6145d
SHA256:   d2cf47718ec2c9091f725f21656858ca73ed64b4a93c045b1a3c2ab8e8b6f0c6
This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is PCHSVC.dll?

PC Health is a suite of features and technologies focused on improving the user experience by providing easier access to Help Content and support services. If the Help and Support Center information is not enough, Support Automation Framework (SAF) applications make it easy for the user to escalate support incidents to the right support center. SAF provides support vendors with the infrastructure to create their own support channels and incident submission applications.

Overview

pchsvc.dll is loaded as dynamic link library that runs in the context of a process. This version is installed on Windows XP.

DetailsDetails

File name:pchsvc.dll
Publisher:Microsoft Corporation
Product name:Microsoft PCHealth Service Holder
Description:Microsoft® Windows® Operating System
Typical file path:C:\windows\pchealth\helpctr\binaries\pchsvc.dll
File version:5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Product version:5.1.2600.2180
Size:38 KB (38,912 bytes)
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++
.NET CLR:No
More details

BehaviorsBehaviors

Hosted services
Runs as a shared service under the Windows svcHost
  • Shared name is 'helpsvc'
  • Shared name is 'helpsvc'
  • Shared name is 'helpsvc'
  • Shared name is 'helpsvc'
  • Shared name is 'helpsvc'
  • Shared name is 'helpsvc'
  • Shared name is 'helpsvc'
  • Shared name is 'helpsvc'
  • Shared name is 'helpsvc'
  • Shared name is 'helpsvc'
  • Shared name is 'helpsvc'
  • Shared name is 'helpsvc'
  • Shared name is 'helpsvc'
  • Shared name is 'helpsvc'
  • Shared name is 'helpsvc'
  • Shared name is 'helpsvc'
  • Shared name is 'helpsvc'
  • Shared name is 'helpsvc'
  • Shared name is 'helpsvc'
  • Shared name is 'helpsvc'
  • Shared name is 'helpsvc'
  • Shared name is 'helpsvc'

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 100.00%

Distribution by countryDistribution by country

United States installs about 35.94% of Microsoft PCHealth Service Holder.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 36.02%
Intel 12.42%
Toshiba 9.94%
American Megatrends 9.32%
GIGABYTE 4.97%
ASUS 4.97%
Hewlett-Packard 4.97%
Compaq 4.97%
Sahara 4.35%
Lenovo 3.73%
Acer 1.86%
Sony 1.24%
MSI 1.24%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE