Windows 10: svchost.exe marked as red on process explorer, possible virus?

Hello everyone, i was going through process explorer and i found that my svchost was in a red background, even though it is in the right directory C:\Windows\System32 and it has a valid microsoft certificate, but after a scan with virustotal, it marks me some warnings. should i be concerned?this is the link to the virustotal scan if anyone wants to have a look: https://www.virustotal.com/gui/file/324451797ac909a4dd40c7a2f7347ef91f6b7c786941ad5035f609c0fc15edaa/detection

:)

 

Analyzing Svchost processes in Windows

Here's how to track down detailed information about any Svchost.exe process running in Windows 7/8.

a) You can use the Tasklist command-line tool to learn which services are running in a Svchost.exe. Just run cmd (command prompt) and hit

Tasklist /svc /fo list

Scroll through the list and find what you need. It's not quite intuitive so you can use third party programs with gui. See below:

b) You can use svchost viewer. Best utility. Note: to run this under XP you need .Net framework 2.0





c) Svchost Process Analyzer is another app for that.





d) And another app called Svchost lookup tool





e) And it won't hurt if you use Process Explorer and System Explorer.


It's never bad to keep your system under control, plus all these apps are portable no installation is required.

kthbai

 

svchost process taking too much resources

Suggestion to read:
What Is the Service Host Process (svchost.exe) and Why Are So Many Running?

and, if needed:

Unmasking Svchost.exe - Is It Legit Or Malware In Disguise?

 

Svchost virus?

Did your antivirus provider identify the malware? If so, did you seek their advice?

You may want to send a copy of the file to VirusTotal for analysis. VirusTotal

Recommend you scan with the Emsisoft Emergency Kit (a free program): How to find and clean malware infections with Emsisoft Emergency Kit If
necessary boot into Safe Mode/Safe Mode with Networking to download and run the scanner or use another computer, put the EEK file on a flash drive and insert the flash drive in the infected computer...you can run the scanner from the flash drive. Other scanners
(some of which may be run in Safe Mode or from a flash drive) that may help with this issue are listed in List
of Malware Removal Tools

OR

IF this is what you are seeing, suggest you follow ALL of the steps (until the issue is resolved) in
this free removal guide Unmasking Svchost.exe - Is It Legit Or Malware In Disguise?

But if you have this malware issue sometimes it will be necessary to reset your computer or do a clean install of the OS.

Recovery options in Windows - Microsoft Support

Redirecting

Regards…

http://blog.emsisoft.com/2015/01/27/top-10-ways-pups-sneak-onto-your-computer-and-how-to-avoid-them/