What is the "PresentationFontCache.exe" process on windows 7? Is the "PresentationFontCache.exe" process a virus? Can I terminate the "PresentationFontCache.exe" process?

"PresentationFontCache.exe" process represents the "Windows Presentation Foundation Font Cache 3.0.0.0" service.

"PresentationFontCache.exe" process is normally running under the parent process "services" as shown in the process tree below:

Boot
   wininit
      services
         PresentationFontCache

On the Processes tab of "Task Manager", "PresentationFontCache.exe" process may be listed as:

Image Name                 Memory   Description
--------------------   ----------   -----------
PresentationFontCach     16,484 K   PresentationFontCache.exe

Additional information about "PresentationFontCache.exe" process:

Command line:
   C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

Programe file information:
   Name: PresentationFontCache.exe
   Location: C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
   Description: PresentationFontCache.exe
   Version: 3.0.6920.5011 built by: Win7SP1
   Size: 42856 bytes
   Last modified: 11/20/2010 10:24:52 PM
   Company Name: Microsoft Corporation
   
Some data files used:
C:\Windows\System32
C:\Windows\winsxs\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294
C:\Windows\assembly\NativeImages_v2.0.50727_64\index370.dat
C:\Windows\assembly\pubpol133.dat
C:\Windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
C:\Windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp

Some registry keys used:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions
HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER
HKLM\SOFTWARE\Microsoft\.NETFramework
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer
HKCU\Control Panel\International
HKLM\SOFTWARE\Microsoft\Fusion\GACChangeNotification\Default
HKLM\SOFTWARE\Microsoft\Fusion\NativeImagesIndex\v2.0.50727_64
HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default

Some DLL libraries used:
C:\windows\SYSTEM32\ntdll.dll
C:\windows\SYSTEM32\MSCOREE.DLL
C:\windows\system32\KERNEL32.dll
C:\windows\system32\KERNELBASE.dll
C:\windows\system32\ADVAPI32.dll
C:\windows\system32\msvcrt.dll
C:\windows\SYSTEM32\sechost.dll
C:\windows\system32\RPCRT4.dll
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
C:\windows\system32\SHLWAPI.dll

"PresentationFontCache.exe" process is not a virus. You should not terminate "PresentationFontCache.exe" process.

 

⇒Application Service Processes on Windows 7

⇒⇒Windows 7 Processes Tutorials