New
#1
svchost Running under User Name
Hi,
Almost everywhere it says if svchost is running under the PC's name or the user logon name then there's a problem, possibly malware. But now I just read this:
Is this true? Must be...So what people have been saying is a sign of malware, is, at least in Win10 normal functioning. And svchost associated with it is in .../system32, where it should be. Supposedly MS is using it for telemetry.Beginning with Windows 10, an instance will start under the user context at
logon (with command line “-k UnistackSvcGroup”).
Am I right about this? Thought I had some deep-seated malware but apparently not?
Thanks