Why does svchost.exe (netsvcs) load RAM?

Question

Iron

Kind everyone! There was a problem with svchost.exe (netsvcs), loads memory to the fullest. Win7 home basic
What has been done:
1. Multiple system reshuffle with HDD formatting
2. Virus check
3. Updates disabled
And it still loads, what else to do?
I looked through the process explorer, but did not find anything suspicious.
Disconnected from the Internet and everything is fine.
The problem was solved by disabling the update, which was re-enabled by the user.

Answer 1

It's definitely an update service. taskmgr and procmon in hand.

Answer 2

Does the Internet load ? usually with this it looks somewhere on the Internet
install netlimiter and see where to knock on the computer
block those addresses

Answer 3

www.wintips.org/how-to-fix-svchost-exe-netsvcs-mem...
that is, the strategy is simple - we look for all services using netsvcs and disable them sequentially. We find the culprit - we can do something.

Answer 4

A miner is hidden under this process, which you most likely downloaded with any file from the network. I advise the article , it describes the identification and correction of a problem similar to yours.

Answer 5

Run resmon.exe (or perfmon.exe /res), on the "CPU" tab, expand the "Services" section and click LMB on the column header, sort by "average for CPU"; In this way, you will immediately see which of the services currently consumes the most CPU time (without having to search for it by enumeration, disabling them one by one).

Answer 6

corporate computer, respectively, there is no right to anything left, but Windows7 updates and installs itself. The process also loaded the RAM, reaching up to 2 GB or more, periodically resetting it. The admin rolled some patch from MS (which is not installed over the air), after which everything became normal. I can't give you a patch number...