Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Windows 7 x64 CryptSvc under Svchost uploading data

30 Mar 2015   #11
SomeUserName

Windows 7 Ultimate 64Bit (SP1)
 
 

CryptSvc about 5mins ago right before I killed it.




Attached Images
Windows 7 x64 CryptSvc under Svchost uploading data-capture.jpg 
My System SpecsSystem Spec
.
30 Mar 2015   #12
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 
CryptSvc uploading data

None of your screenshots show anything useful. Could you provide one showing the svchost PID and preferably something that shows that a connection has been established?

Example:

Svchost PID:

Windows 7 x64 CryptSvc under Svchost uploading data-svchost.exe-584-properties.jpg

Windows 7 x64 CryptSvc under Svchost uploading data-svchost-lookup.jpg

Connections:

Windows 7 x64 CryptSvc under Svchost uploading data-essential-nettools.jpg


My System SpecsSystem Spec
30 Mar 2015   #13
SomeUserName

Windows 7 Ultimate 64Bit (SP1)
 
 

Yes. Here is the PID. Although its not doing anything strange right now. Its a very intermittent problem. The network meter is acting like it should.

As for connection established Im gonna DL EssentialNetTools as you show if its free or if its not free I'll be a while as Ill have to find something else that is.


Attached Images
Windows 7 x64 CryptSvc under Svchost uploading data-1.jpg Windows 7 x64 CryptSvc under Svchost uploading data-2.jpg 
My System SpecsSystem Spec
.

30 Mar 2015   #14
SomeUserName

Windows 7 Ultimate 64Bit (SP1)
 
 

OK That PID is showing up as SVChost which is what it shows as in Windows TAsk Manager but when I right click that SVC host to services there is multiple listing for the one service # as shown in the previous picture and thats where the Cryptsvc is. But this is what EssentialNetTools Lists for PID 1524


Attached Thumbnails
Windows 7 x64 CryptSvc under Svchost uploading data-svc.jpg  
My System SpecsSystem Spec
30 Mar 2015   #15
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 
Some free network tools

Here's a few links to stuff that you might want to use (free)

Essential Net Tools

Crowdstrike CrowdInspect (near bottom of page)

TCPeye
My System SpecsSystem Spec
30 Mar 2015   #16
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

Your screenshot shows no data being transferred - just a listening port which is normal.
My System SpecsSystem Spec
30 Mar 2015   #17
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 

A little more info:

Okay so using Comodo Killswitch (free) on my own machine shows cyrptsvc PID running under svchost. Checking network shows zero data being transferred. Perhaps you could keep any eye on it next time it goes crazy and use one or more of these tools to see where it's connecting to?

Windows 7 x64 CryptSvc under Svchost uploading data-cks.jpg

If you see "Established" connection for the PID try getting the ip address and domain name.


My System SpecsSystem Spec
31 Mar 2015   #18
SomeUserName

Windows 7 Ultimate 64Bit (SP1)
 
 

OK next time my network meter goes nuts like the previous pictures I'll open up the Essential Tools again (Unless told to drop Essential Tools and get Comodo instead) and repost the PIDS. The issue only happens maybe every second day or so but its not until a few days ago that I seen it as bad as the 1st pic on this page and the last pic of page 1. Its just so random I cant even pinpoint the trigger for it.
My System SpecsSystem Spec
31 Mar 2015   #19
SomeUserName

Windows 7 Ultimate 64Bit (SP1)
 
 

CONNECTION ESTABLISHED.. However its not making the meter do anything crazy but there IS a connection there. I killed it as soon as I took the screenshot. IDK if this is of any use since the meter was OK though.


Attached Thumbnails
Windows 7 x64 CryptSvc under Svchost uploading data-pid.jpg  
My System SpecsSystem Spec
31 Mar 2015   #20
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 
Disable remote desktop - test

Would you try this to see if it makes any difference?

Control Panel> System> Remote Settings



Configure as above.

Also next time you get the problem lets get a better look at what port it's using.

For now - run an Elevated Command Prompt and click in the top left corner on C:\_ then choose "Properties" > "Options" then enable "Quick Edit Mode"

Next time the problem occurs run Elevated Command Prompt and in the window that opens up type:

netstat -ano

Press Enter. Wait for the list to populate then highlight all the text by left clicking and dragging your mouse over the text. Then when it's highlighted - right click, open your text editor and paste the results. (Ctrl+V)

Post them here thanks.
My System SpecsSystem Spec
Reply

 Windows 7 x64 CryptSvc under Svchost uploading data




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Mystery uploading of data
Hi all, I've noticed that my PC is uploading data to somewhere when it shouldn't be, yesterday it was about 110MB, but other days it has been over 100MB an hour. Could someone please guide me on how to find out what is going on with the PC and where the data is going? Thanks Stu
System Security
uploading photos to web with Windows 7
I have a toshiba satellite laptop running windows 7 after enjoying XP for several years... My problem centers around photos. I cannot right click on a photo(on the web or in an email) and find 'save as' and send it to my picture folder I also cannot upload pictures to the web... id pictures on...
Browsers & Mail
Error - CryptSvc prevents system standby - Urgent!
Hello everyone, When I run the command: powercfg -requests I notice there is a SERVICE named CryptSvc preventing my laptop from going to standby. I have looked up on how to disable it using OVERRIDE command to no avail. If anyone have experience on this, please advise. Thank you very...
General Discussion
svchost.exe file in the /windows directory not system32
Anyone else able to help on this? My issue is pretty much the same.... I have a svchost.exe file in the /windows directory (not system32, where it SHOULD be). All the usual virus/malware cleaning programs can't get rid of it (I've run Hitman Pro, Malware Bytes, and TDSS Killer). Malware Bytes...
System Security
Uploading XP files to Windows 7
I downloaded some files from XP to a thumb drive & now can't get them uploaded from the thumbdrive to Windows 7 files. Appreciate instructions how to do it. Thanks Dorothy
Software
Windows 7 uploading issues
Hey guys, I hope you can offer me some advice. I have had Windows 7 for about a month and I ran into a problem a couple of days ago. I ended up getting the "Bankerfox" virus and just finally got it removed. However ever since this issue I can't upload anything to any website, including...
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 18:25.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App