1.    04 Mar 2017 #1
    Join Date : Nov 2016
    Posts : 10
    Win7 and Linux

    svchost Running under User Name


    Hi,

    Almost everywhere it says if svchost is running under the PC's name or the user logon name then there's a problem, possibly malware. But now I just read this:

    Beginning with Windows 10, an instance will start under the user context at
    logon (with command line “-k UnistackSvcGroup”).
    Is this true? Must be...So what people have been saying is a sign of malware, is, at least in Win10 normal functioning. And svchost associated with it is in .../system32, where it should be. Supposedly MS is using it for telemetry.

    Am I right about this? Thought I had some deep-seated malware but apparently not?

    Thanks
      My ComputerSystem Spec
  2.    04 Mar 2017 #2
    Join Date : Oct 2014
    Trnava
    Posts : 2,866
    Windows 10.4 Home 1709 x64

    I have never seen svchost running under user name, not in 10 either.
    You should open file location an check, if it is really svchost in System32.
    Then again, I have never allowed telemetry and I disable Unistack services.
    Attached Thumbnails Attached Thumbnails capture_03052017_010351.jpg  
      My ComputerSystem Spec
  3.    04 Mar 2017 #3
    Join Date : May 2015
    Central IL
    Posts : 4,250
    Mac OS Sierra

    Malware can run disguised as a sub process under SVCHost. Other programs also run under SvcHost, since it is a main process used by Windows when traffic steering for network and other items. You can run the programs in this post to check for possible malware or a run away process. Read & Run Me First Malware Removal Guide (incl. Spyware, Virus, Trojan, Hijacker) | MajorGeeks.Com Support Forums
      My ComputerSystem Spec
  4.    05 Mar 2017 #4
    Join Date : Nov 2016
    Posts : 10
    Win7 and Linux
    Thread Starter

    That's a great malware scanning link. Thanks.
      My ComputerSystem Spec

 


Similar Threads
Thread Forum
Solved Windows 10 svchost virus
Hi. I have recently started having CPU problems. Apparently, it's because of a trojan virus called svchost.exe. Anytime I use an internet browser (any) I get a message from my web protection that it's blocking the virus but my CPU still gets...
AntiVirus, Firewalls and System Security
User Accounts See What User a Process is Running As in Windows 10
How to See What User a Process is Running As in Windows 10 Run as different user allows a user to run .bat, .cmd, .exe, .msc, and .msi files with different permissions than the user's current logon provides. Run as different user will only...
Tutorials
Error on reboot svchost.exe
I get this error quite often on a restart or shutdown. Any ideas why I might have this? Windows 10 Pro x64. Means my reliability graph is in the mud most of the time. Description Faulting Application Path: C:\Windows\System32\svchost.exe ...
BSOD Crashes and Debugging
Solved svchost CPU usage at 55%
not sure since when and how ( must have been recently ), but my windows 10 got probably infected, whenever i start pc, my cpu usage jumps to 55% ±. After I open task manager, i can see this ( attachment ) : the PID of "faulty" service is always...
Performance & Maintenance
SVCHOST eating up memory
What services of svchost should I disable? I think it's eating up my memory. I think if the computer has 2GB RAM, it should have only like 30-40% usage but I have 63% 5059650597
Performance & Maintenance
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 04:43.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums