Windows 7 x64 CryptSvc under Svchost uploading data

Can somone explain what **CRYPTSVC** cryptographic serivces/svchost is? I keep catching svchost uploading SOME kind of data via a network monitor.

I cannot find much info about cryptographic services. What EXACTLY is it and what kind of data would it be uploading or programs it would associate with and the data thats uploadin how can I find out to who/where its uploading TO?

This random contstant uploading is making me paranoid. When I kill the SVCHOST thet cryptsvc is in the uploading stops.

Its only small amounts of data.

?????????????????

I have dropbox but it is nothing has been added so there shouldn't be any activity?? When I upload it is only in use while it is being used. Does dropbox use bandwidth when no files are being used from it?

In AVG there was something checked that said:
"Allow in-the-cloud verification of threat detections. CAUTION: Disabling this feature could impact AVGs ability to protect you correctly. It is strongly recommenced to keep this feature enabled." EVerything else was unchecked.
I'll try to disable that and see if the uploads stop.

Whats confusing me though is its not just uploading when there is activity. It just randomly starts and upload for like 5-10 mins before it stops. Unless I get overly paranoid and end the process/service myself.

(EDIT--Since you mentioned AVG I shall also note that when I upgraded from AVG 2012 to the new 2015 version my computer is running slower than a turtle/snail now)

OK so I left this sit for a few days but it still seems to be doing it. The network meter shows upload , I go to resource meter, Its svchost that show the highest upload in resource meter. Then I open task managaer and gp to the correct PID in services and of course it still that bloody cryptsvc uploading something and I can't figure out what is being uploaded and where its being uploaded TO. I kill the process in task manager and the upload stops. Little bit later cryptsvc is back and uploading again.

I um unable to find results on google on how to determine/research what is being uploaded by cryptsvc and to who or where whatever is being uploaded is going.

EDIT: I JUST FOUN CRYPTOGRAPHIC SERVICES IN SERVICES.MSC. i STOPPED IT AND DISABLED IT AS PER THE PICTURE. Is this leaving me open to any sort of attacks?

I woke up this morning and as soon as I turned on the monitor, according to the network meter *something* was being uploaded to *somewhere* and I still cant figure out how to identify and solve this. I killed the cryptsvc service and sure enough the upload stopped. In Cloud verification is disabled in AVG. Its not Dropbox because Dropbox is only 1 Send (B/s). The cryptsvc often shows upload rate of 10,xxx Send (B/s).

I ask again...Is it safe to disable and leave disabled cryptsvc in services.msc without leaving myself open to any sort of attacks? I read the description of what cryptsvc is in services but still cannot figure out why it needs to upload so often and what it is that is being uploading and to where?

(The resource meter picture is after I killed the svchost that contained the cryptsvc service)

Its at it again. REALLY Bad this morning too. I realize its a windows service but this is starting to cause me extreme paranoia.

Ive never seen the network meter go THIS nuts before. After I killed the service the upload flatlined.

Is that normal for cryptsvc to make the network meter to go like THAT???