Is this normal for Windows10

a reply to: Ganjatobi

Thank You very much. SFC Scan came up with errors I think has fixed. While looking through the CBS log some of what was broken looks like something a scammer would want. Text to speech. keyloggers.

You all have been awesome in your help and ideas.

Paranoia isn't always a bad thing lol

I wish Spybot Search and Destroy hadn't went all commercial .
Once upon a time , it was free and gave a complete list of all running processes. WAAAYYYY better than Task Manager or Perfmon .

Use Defender .

a reply to: TheGhoul

If I'm not mistaken, svchost is used to execute services, so all services running in the background are associated with one svchost instance.

To get more information about running processes than what the Windows tools show you can download Process Explorer, also from Microsoft (because they bought all the original Sysinternals utilities some years ago).
This will show you what service is running on each of those svchost instances.

a reply to: Gothmog

a reply to: TheGhoul

Sounds like you are getting a grip on the whole Microsoft thing!

I would agree with all the other excellent ATS folks who suggest Proccess Explorer. It was actually written by a Microsoft engineer, Mark Rasinnosomethingorother, as was most of the Sysinternals suite. It's well worth downloading, is free and has a wealth of useful utilities. I especially like "autoruns.exe" which will show you a list (from the registry) of all the prograns that are loaded when your PC starts up. Be prepared to be shocked, I was. It has helped me a few times in the past to get rid of nag-ware, you know, the box that pops up every 10 minutes to tell you your PC is in peril unless you visit this website and purchase blah blah blah. (Rant! It is my opinion that the people who write these sort viruses should have the source code tatooed on their scrotum, with a blunt needle.) This sort of software is usualy installed as a result of visiting certain dodgy web sites. So a friend tells me.

As with all, bona fide, utiilties that can access the registry, use with caution.

Again, Windows Defender is your friend. The guys at Microsoft do a pretty good job (no, I don't work for them) at keeping up to date with all the latest threats.

Best of luck and I am sure you will have it all sorted soon.

Anyway, if you spot an dodgy program cropping up all the time it will probably be listed by autoruns.exe, which will give you the option of disabling or removing it.

You guys have been awesome!!

Looking through Process Explorer Its just flooded with SVCHosts. No tree to see what is using what or I just don't know what I'm looking at.

Using Resource Monitor and Task Manager all says the same thing as Process Explorer. SVCHosts with nothing around them. Nothing telling me what each instance of it, is for what. Do I just randomly turn them off to see what breaks?

So, Windows is trying to ease my view of Windows and in doing so has processes run that I don't use. My email notification for example uses an instance of SVCHost to give me notifications of emails? Even the Start Menu uses SVCHost to show me my start menu?

I guess I should be at ease that it's all verified by the companies that own them.
I don't have a grip on this at all LOL.

Everyone running windows has this same thing going. Its normal... This should not be normal. I truly believe that quietly millions of window users are slowly mining something for them... Where in the talks thought for a moment that all that is okay to do...
People with more thinking people with less can do the same...WT to that.

originally posted by: TheGhoul
Looking through Process Explorer Its just flooded with SVCHosts. No tree to see what is using what or I just don't know what I'm looking at.

If you move the mouse over one of those entries it will show you what service is using that svchost instance.
Double-clicking also allows us to see that information.

a reply to: ArMaP

Thanks, but it's still convoluted.
A lot of them make sense. Windows defender and seeing your desktop and other things That feel important.

Cryptographic services? Geolocation Services? Delivery Optimization? Remote Access Connection Manager? Windows Time... Even the clock uses it.

I can't just randomly turn this stuff off...

svchost.exe is normal yes and part of the core of Windows (has been numerous versions) that comes with Windows by default. So it's safe and if you're seeing one of them utilizing a lot of CPU, it generally means it's busy (such as with background updates).