svchost exe (netsvcs)

[Kartman]

Hi. I recently installed windows 10 on my PC, and I'm having a problem with task that occasionally runs in the background and cause my internet to slow to the point where it's unusable. I'm having cheapest internet, and my internet is good for basic stuffs like Facebook, Youtube. But when task called "svchost.exe (netstvcs)" starts running in background, everything slows down. If I'm downloading or updating game, it usually goes ~100kb/s but when 'svchost.exe' hits it falls to like 5-15 kb/s. And also i know this starts running in background by two reasons, first is that i see it in task manager/network/resource monitor or when i try to open task manager i get error message "The stub received bad data" (photo bellow). When i right click on it and end task, my internet goes back to normal, but problem is that it keeps running by itself. So please can you help me and tell me can I remove it, and if i can't what can i do about it. Also I'm using pirated version of windows 10, 64 bit.

 

[Ravi Sankar]

Check if there is any Virus (Forceably Kill this process and check if reopens)
See here for some more information
https://appuals.com/how-to-fix-high-cpu-usage-by-svchost-exe-netsvcs/

 

[johnbl]

I would expect you ran out of tcp connections and the system is throttling until the tcp timeout expires. 300 seconds or 3 minutes (I forget which)

Start cmd.exe as an admin and run
Netstat.exe -a

This will show the connections that are current and the ones that are waiting to close.
I think you can use the -x or -e option to get the name of the binary that owns the connection.
(Sorry, not at my windows machine now so I can not check the options)
Netstat.exe. -b
Might show the binary that used the socket.

 

[Solandri]

Unfortunately svchost.exe is a catch-all process. The Windows API includes a lot of standard function calls. Since lots of programs use these function calls, rather than loading a new copy of it into memory for each program that uses it, Windows loads a single copy into memory as a dynamically linked library (DLL), and this one copy gets used by all programs which call that function. This copy in memory shows up as svchost.exe. So it's impossible to tell from the name which process is actually using that particular svchost.exe at that particular time.

You can try johnbl's suggestion to try to figure out which process is calling the DLL. You can also try Process Explorer, which will show each call to svchost.exe underneath the calling process.

https://technet.microsoft.com/en-us/sysinternals/processexplorer

But in my experience, the culprit is usually Windows Update. Try going into service manager (tap the windows key, search for services, and start the Services Desktop app). Disable the Windows Update service, and stop it. If that fixes the problem, you just need to give your computer some alone time on the network so it can download the latest update, then reboot it so it can install the update. Sometimes installing an update causes new updates to become installable, so you may have to repeat this a few times, especially if you haven't been keeping up with updates. You may want to lug the computer over to a friend's house who has faster Internet, and allow it to download the updates there.

The other culprit I've seen is Adobe updater (not sure if that's the name) that gets installed with Adobe PDF Reader. It seems to be a bandwidth hog when it's trying to update.

 

[Kartman]

Thanks guys, you solved my problem and I learned some new stuff from this. I fallowed link that Ravi Sankar gave and i just did 2 steps from it. I disabled the BITS service and I disabled the wuauserv service. And now it still runs in background but it doesn't take as much bandwith as it used to. Thanks and have a nice day.

 

[Priteshm14]

i found one solution for windows 10 go to setting > network & internet > ststus>change connection properties>set as metered connection >on it worked for me and no need to disable BITS & windows update

 

[Solandri]

Thanks guys, you solved my problem and I learned some new stuff from this. I fallowed link that Ravi Sankar gave and i just did 2 steps from it. I disabled the BITS service and I disabled the wuauserv service. And now it still runs in background but it doesn't take as much bandwith as it used to. Thanks and have a nice day.

The wuauserv service is Windows Update. So make sure you turn it on at least once a month, give it time to update, then disable it again.

i found one solution for windows 10 go to setting > network & internet > ststus>change connection properties>set as metered connection >on it worked for me and no need to disable BITS & windows update

Unfortunately the metered connection trick only works if you're getting Internet over WiFi. The option is unavailable over Ethernet.