What is 'svchost.exe (netsvcs)' and what is it downloading?

Since the last 4 days I've been noticing this unusual activity in my internet usage. Even at idle(no programs downloading anything) my data usage keeps on increasing at a rapid rate. I checked through 'Resource Monitor' and found out  'svchost.exe (netsvcs)' to be the culprit. I don't know what it is downloading but whatever it is, it's really huge...It sucks around 150-200 megabytes everyday. If I try to end this task, I'm not able to use any internet related app at all. I don't know what it is, but can't be a malware.

Guys if anyone know what this is and how to fix this thing please help me cause' I'm falling short on my bandwidth.

 

Question Info


Last updated August 14, 2019 Views 19,055 Applies to:

Download Process Explorer (freeware from Microsoft) and further information:
https://technet.microsoft.com/en-gb/sysinternals/bb896653

 

Open Process Explorer and click View on the menu bar. From the drop down menu click Select Columns and then the Process Image tab. Check the boxes before Description, Image Path, Image Type, and Command Line. I suggest you also click on two other options on the View dropdown menu, namely Show Processes from All Users and Show Fractional CPU.

 

Place the cursor on the svchost process generating the CPU activity, right click, select Properties and the Service. You can Stop and Restart any service from that window by placing the cursor on the service and clicking the appropriate button. You can see what impact it has on CPU usage. Before stopping any service read the summary describing the service so that you have a better understanding of the implications of stopping the service.

 

Place the cursor on the svchost process showing the high CPU activity, right click and select Properties. Click the Services tab and you will see a list of services that use the process. The image below shows the services for command line C:\Windows\system32\ svchost.exe -k netsvcs. The command line is displayed as a column in the main Process Explorer window if it has been selected as a View option but if you click the Image tab for the selected process it is also detailed there. The services numbered ,, and   relate to Windows Update. I cannot tell if these are causing the activity you complain about but they will regularly generate activity through this process.

 

You can Stop and Restart any service from that window by placing the cursor on the service and clicking the appropriate button. You can see what impact it has on CPU usage. Before stopping any service read the summary describing the service so that you have a better understanding of the implications of stopping the service.

Gerry
Stourport-on-Severn, Worcestershire, England
Enquire Plan Execute

7 people were helped by this reply

·

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

hey,

Not sure but same was for me.It was actually syncing for me the settings as well as some onedrive data i guess.

Hope this helps.

Sumit
Windows Insider MVP 2018-2020 and Volunteer Moderator

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Thank you for your support Gerry.

I stopped the 'Background Intelligent Transfer Service' and it worked. There was no unwanted data usage after that. But, since you told that this service is related to windows update, I'm not sure if it's good idea to manipulate it. Moreover, I have reserved my copy of Windows 10 (it hasn't started downloading yet) so just wanted to ask if it's fine to stop it without hampering my copy of Windows 10.

2 people were helped by this reply

·

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Thank you for your reply Sumit.

My OS(windows 8.1) is not connected to any Microsoft Account to sync any setting or Onedrive data.

I just want to know if it ever stopped?

2 people were helped by this reply

·

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Meet

It would be sensible to check your service settings as you should not run the computer with the Background Intelligent Transfer Service' disabled.

Please provide a copy of your System Information file. To access your System Information file select the keyboard shortcut Win+R, type msinfo32 and press the ENTER key. Select File, Export and give the file a name noting where it is located. Do not place the cursor within the body of the report before exporting the file. The system creates a new System Information file each time system information is accessed. You need to allow a minute or two for the file to be fully populated before exporting a copy. Please upload the file to your OneDrive, share with everyone and post a link here. Reports in normal mode preferred. Please say if the report has been obtained in safe mode.

 

Please upload and share with everyone fresh copies of your System and Application logs (two files) from your Event Viewer to your One Drive and post a link here. You can remove the earlier copies of the logs from your OneDrive.

 

To access the System log select the keyboard shortcut Win+R, type eventvwr.msc and press the ENTER key. From the list in the left side of the window select Windows Logs and System. Place the cursor on System, select Action from the Menu and Save All Events as (the default evtx file type) and give the file a name. Do the same for the Applications log. Do not provide filtered files. Do not place the cursor in the list of reports before selecting Action from the menu. Do not clear logs whilst you have a continuing problem.

 

For help with OneDrive see paragraph 9.3:
http://www.gerryscomputertips.co.uk/MicrosoftCommunity1.htm

Gerry
Stourport-on-Severn, Worcestershire, England
Enquire Plan Execute

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

I have this problem too and have disabled BITS, but it starts itself back up when the computer is idle.  I have a cap on my data each month and pay good money for it!  Svchost.exe downloads approx 3 gigs every few days which eats up my 30 gig per month limit pretty quickly.  I can post the above mentioned logs, but want to make sure I will get a response since this post is somewhat dated.

Thanks in advance to anyone who can help me!

Shannon

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Shannon better start off a new thread in future.It isn't a good idea to post up a reply to a 6+ month old thread.

You can get more control over the updates by reading this:

http://www.askvg.com/fixing-windows-10-automatic-updates-install-problem/

Sumit
Windows Insider MVP 2018-2020 and Volunteer Moderator

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

so what exactly is svchost.exe? is it good or bad or what ??

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Good. It is a key system file:

https://en.wikipedia.org/wiki/Svchost.exe

Gerry
Stourport-on-Severn, Worcestershire, England
Enquire Plan Execute

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.