This is a Windows system installed file with Windows File Protection (WFP) enabled.
There are 55 versions of svchost.exe in the wild, the latest version being 6.3.9600.16384 (winblue_rtm.130821-1623). It is started as a Windows Service called 'QQPCFixSvc' with the name 'eventlog' and described as “Enable computers in ad-hoc network interact with each other even with different netmask.”. . It is run under the context of the LOCAL SERVICE account. This is executed as a shared service (which simply means that this service can share a process with other Win32 services). The average file size is about 19.14 KB. The file is a digitally signed and issued to Microsoft Corporation by Microsoft Corporation. During the process's lifecycle, the typical CPU resource utilization is about 0.0007% including both foreground and background operations, the average private memory consumption is about 20.57 MB with the maximum memory reaching around 42.97 MB. Addionally, typically read and write I/O disk operations is about 52.43 KB per minute for reads and 16.37 KB per minute for writes.
Host Process for Windows Tasks is a generic process which acts as a host for processes that run from DLLs rather than EXEs. At startup TASKHOST checks the Services portion of the Registry to construct a list of DLL-based services that it needs to load, and then loads them.
(Note, the programs listed below are for all versions of Host Process for Windows Services.)
(Note, the behaviors below are for all versions of svchost.exe, select a unique version for details.)
This is the shared Service Host controller that runs some of the following shared services:
Exceptions allow programs to access to the Internet through an outbound connections
Based on 40+ industry antivirus scanners, 16 of them detected the following malware.
Austria installs about 39.50% of Host Process for Windows Services.
