svchost runs taskhostw.exe, which then runs a command:
what is it doing? I haven't found a thing on google. I know what taskhost is but that KEYROAMING thingie seems odd. Is that normal? Oh, taskhost runs from system32 as it should. As does the usual takshost.
I've also seen taskhostw running a "U" command and "Login" without quotes.
Edited by tos226, 09 May 2016 - 08:00 PM.