For you and me and many other "techs" here, of course. But not necessarily for someone too focused on looking at porn and deleting company data. Besides, he could just rename the file "svchost.exe" and no one would notice, since there can easily be 5 or 6 of these in the Task Manager with default Services config.