Hi,
I received a performance alert from Norton about high disk usage by a process called svchost. The file is located in c:\windows\winsxs\amd64_microsoft-windows-services-svchost followed by some numbers and letters. I always thought that any legitimate svchost is located in the c:\windows\system32 folder but I found that that is not always the case after reading a similar topic here titled "Sign of infected/Compromised/false svchost.exe".
I just want to verify that this is a legitimate process as well. Thank you.