svchost loads the operative

Good afternoon. The following problem came out: the process of svchost eats 2.5 GB of operating and loads the percent by 25% steadily, and the process is only when the Internet is switched on. If you kill him, he reappears in a minute.



I read that this is due to The Windry's attempt to look for updates, but it is not related to the update because the service updates I disabled. Judging by the path, the RPC service is responsible for the process - a remote call of procedures that cannot be disconnected. I'm already thinking maybe the miner got it. Who knows what the problem might be?