started seeing this two services suddenly "CDPUserSvc_604aa" and "cbdhsvc_604aa"

I have just installed windows 10 20H2 on my desktop 3 or 4 days ago and below two services "CDPUserSvc_604aa" and "cbdhsvc_604aa" started showing suddenly, please check below screenshot

can someone please confirm are this two services are virus or official services from Microsoft ? because i have checked on other two laptops and i am not seeing this two services.

thanks

2 Answers

These are Microsoft "Per-User Services" that use a random or pseudo-random suffix. They are "child copies" of the main service that, if I remember correctly, are created at login time. If you disable them they come back on reboot since they are "destroyed" when you log out and "recreated" when you log in.

Microsoft: Per User Services in Windows

Per-user services are services that are created when a user signs into Windows or Windows Server and are stopped and deleted when that user signs out. These services run in the security context of the user account - this provides better resource management than the previous approach of running these kinds of services in Explorer, associated with a preconfigured account, or as tasks.

I checked my 20H2 machine here and my production 20H1 as well. The services above are not running on my machines.

I have "Clipboard User Service" , not Clipboard Scenarios.

I have "Connected Devices Platform Services" , not Connected Devices Platform Scenarios.

I do not see this, and you do not see elsewhere.

So check for installed software, vendor apps and drivers, that might be doing this and check also for viruses with Windows Defender. Check and see if you have User accounts like this but I would not think so.

I trust this provides helpful information about this.