Windows Process Xor (Svchost.exe)

The file name of the Windows process naemd xor is svchost.exe. What is it?

Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!