Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: svchost (netsvcs) download from Akamai - What is initiating?

22 Nov 2014   #1
goshenBleeping

Windows 7 Home Premium 64bit
 
 
svchost (netsvcs) download from Akamai - What is initiating?

Platform: Windows 7 Home Premium 64 bit, ASUS K52F laptop

Note: I have posted this on 2 other forums & did not receive a solution so I am posting it here. Hope that is okay.

I have observed extensive downloads (using the NetMeter gadget) averaging 400-600kbps for up to 10 minutes from Akamai. This happens every time I reboot and log into my laptop. I would appreciate if someone would explain what is happening.

I would like to determine exactly which software on my laptop is initiating this download from Akamai.

Note that I do not have any data in the cloud so this should not be a sync event.

Here is the process I followed to track this download:
(1) Used Windows ResourceMonitor to see the process PID that was downloading from the Internet. ResourceMonitor displayed "svchost (netsvcs)" as the process involved in the download.
(2) Used ProcessMonitor to display the process tree for the svchost process in question. See the attached "Appinfo Svchost process tree.jpg" for details.
(3) Used CPorts.exe to trace the process PID to a specific URL from which the process is downloading, then traced the IP in Who.Is to see that the site is Akamai. See the attached "Download process & remote address.jpg" for details.
(4) In ProcessMonitor if I kill the specific process, the download immediately stops. This is confirmation that I am looking at the culprit PID.

Note that I have scanned my laptop with the following & nothing was found: AdwCleaner, Avira, Malwarebytes, Stinger, SuperAntiSpyware, Windows Defender, TDSSKiller, Gmer, Junk Removal Tool, Rkill, RogueKiller. I also used SFC to check integrity of Windows libraries - all ok.

I understand that Akamai is a CDN. However the download does seem to be extensive (although I do not have specific numbers as to exactly how much is downloaded).

==> How do I determine exactly which software on my laptop is initiating this download & what is being downloaded from Akamai?

Thank you.




Attached Thumbnails
svchost (netsvcs) download from Akamai - What is initiating?-download-process-remote-address.jpg  
Attached Images
svchost (netsvcs) download from Akamai - What is initiating?-appinfo-svchost-process-tree.jpg 
My System SpecsSystem Spec
.
22 Nov 2014   #2
Tookeri

Windows 7 Pro 32
 
 

I think the next step would be to try software like Microsoft Network Monitor or it's newer replacement Microsoft Message Analyzer. Or Wireshark. But I've tried that myself and I'd say it's impossible to fully understand what and why the OS itself is connecting and downloading, especially when it's from Akamai and similar.
Meet the successor to Microsoft Network Monitor! - MessageAnalyzer - Site Home - TechNet Blogs
But I hope a network expert can stop by and help out more.
My System SpecsSystem Spec
17 Jul 2016   #3
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

Old thread but the answer is that it's an Akamai operated server that Microsoft uses to distribute Windows Updates from. There are Akamai servers all over the world. Here's a recent trace from my machine:
svchost (netsvcs) download from Akamai - What is initiating?-tracert.jpg
So when I check for and download windows updates they arrive from a server here in London UK.

Akamai provides download services to third parties, including Microsoft. Both Windows Update and WSUS seem to download content from Akamai rather than directly from Microsoft. Akamai has many servers and can figure out which ones are closest to you resulting in much higher download speeds.


My System SpecsSystem Spec
.

Reply

 svchost (netsvcs) download from Akamai - What is initiating?




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
svchost.exe (netsvcs) is always downloading something
im running build 7100 fresh install. help, i need to shut this thing down.
Performance & Maintenance
svchost.exe(netsvcs) problem cpu load high
Hello, I have a problem. In the task manager -> system resources, I see that a process called svchost.exe(netsvcs) (if I'm correct) is using about 50% of cpu. The cpu is AMD dual core 2.81GHz. This doesn't always happen. Right now, it uses 48 %. Should I be concerned? Is it a legitimate process...
Performance & Maintenance
svchost.exe (netsvcs) maxing CPU out by streaming in audio feeds
I have encounter a problem with this svcshost streaming constant feeds of audio in. I have tried a registery fixer as suggested on search I did and it did fix it. I researched the problem on this forum and tried several things others suggested back in 2009 to others. Such as making sure that my...
Performance & Maintenance
svchost.exe (netsvcs) connects to weird hostnames - screenshot
So svchost.exe (netsvcs) connects to weird hostnames and I found out by chance, when I opened Resource monitor. What does this mean? My antivirus/firewall application seems to think there's nothing wrong. How can I be sure that there's nothing suspicious going on? Thank you
General Discussion
svchost.exe -k netsvcs Slowing Down Computer
It's been doing this for a while now, too.. I don't know if this has anything to do with it, but I disabled windows update a long time ago; if I try to update it now, my system can't handle it, and it reverts its changes. Help would be appreciated. Where would I start?
General Discussion
Svchost.exe (netsvcs) and download related issue
hello everyone, i hope this is the right place to post this. it started about 2 weeks ago, i noticed that this process, Svchost.exe (netsvcs), is always downloading something, i tried alot of ideas that i read about online and non of them worked, i was using certain anti-virus when it happened....
Network & Sharing


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 21:46.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App