Guys i need your help. Services.exe is consuming 50% CPU both in Safe Mode as well as in Normal mode on my laptop. But it only does that for say 30 minutes or so and then becomes idle. I have scanned my laptop for virus/spywares but didn't found any. Not sure what's wrong with it. I have got a screenshot of process explorer when it was doing that but not sure how to attach it with this topic. I can summarize the process explorer screenshot as:
Services.exe PID=672 CPU=51.52% Description=Services and Controller app
On right clicking on it and selecting properties shows:
Thread ID=700 Cswitch Delta=834 Start Address=ntdll.dll!RtlpIOWorkerThread
The above one is consuming whole of 50% CPU. I clicked on ntdll.dll and there is button at the bottom of properties as "Stack" which shows a list from 0 to 16 which includes ntkrnlpa.exe, eventlog.dll, ntdll.dll & kernel32.dll.
If you need any further information just let me know.
What Windows are you using? I actually used to have this problem, but it was resolved when I installed a new OS. When you say process explorer, I assume you mean you're using the default windows task manager. This might not help much, but you could try using Anvir task manager, which would give you more detailed information, and which just so happens to be free for dottechies.
@Locotus: I will try that and will update the post. Thanks.
@Pwnana: I am using Win XP Prof SP3 and process explorer is not default Win Task Manager. It's a different Microsoft software which you can find at http://technet.microsoft.com/en-au/sysinternals/default.aspx
Is there a way by which we can add screenshots in the posts?
Sandeep – Pwnana is right about Anvir being the greatest task manager.
You are right about Process Explorer 11.33 being different from the default Windows Task Manager even though Process Explorer11.33 also is a Task Manager. I can empathise fully with Pwnana because the name Process Explorer can puzzle any sensible person.
I have Anvir Task Manager 6.2.1 – got your services.exe trained on my sights, have right clicked "detailed information" & can jpeg a screenshot of the whole blessed thing to you by email. Give me your email id – its faster else it will take very long.
BTW services.exe for me is not the same as for you because you are sp3 & i am sp2
Pls give me your email id asap
btw ntdll.dll is also there. Its parent process is supposed to be -winlogon.exe. PID obviously would differ because you are sp3 & I am sp2.Anvir as Pwnana said is great
Look if your cpu has gone nuts you can succeed only by taming your cpu. If you cannot tame your cpu there is nothing you can even strive to do.
Anvir diagnoses & describes but does not tame the cpu
Use ProcessTamer (thanks to Ashraf) I got it.Install it. It has a bandwidth. Upper level 70% of cpu cycles lower end 8% of cpu cycles.Since 50 is less than 70 you can configure your cpu to say 30 or 40.WHATEVER YOU DO NOT NOT EVER CONFIGUE IT TO REALTIME FOR ANY PROCESS.READ ASHRAF'S BLOG ON PROCESS TAMER IF YOU CAN. ITS GREAT AS USUAL.Process Tamer can be easily configured. In the current circumstances configure it to consume more cycles than any other process. When you do that it will run faster than any process & tame that process all the way down to 8%.Only after the process behaves itself & uses only 8% would it be allowed to go back
I have installed AntiVir as well and also disabled IObit products. Also unplugged all the external peripherals but still no luck. Services.exe is still consuming 50 % CPU. Regarding Process Explorer, it's the utility used by Microsoft Engineers to diagnose the problems like this. As mentioned above in my first post, ntdll.dll!RtlpIOWorkerThread – It's stacks as per Process Explorer are:
I have also used Antivir and it's detailed information of Services.exe FILES tab are:
AppEvent.Evt EVT File Services and Controller app C:WINDOWSsystem32configAppEvent.Evt 2B8 8A0C12A0
Internet.evt EVT File Services and Controller app C:WINDOWSsystem32configInternet.evt 2C8 8A5C21F8
NetLimit.evt EVT File Services and Controller app C:WINDOWSsystem32configNetLimit.evt 2D8 8A5BC520
ODiag.evt EVT File Services and Controller app C:WINDOWSsystem32configODiag.evt 2E8 8A598E50
OSession.evt EVT File Services and Controller app C:WINDOWSsystem32configOSession.evt 2F8 8A598A20
SecEvent.Evt EVT File Services and Controller app C:WINDOWSsystem32configSecEvent.Evt 308 8A0AE590
SysEvent.Evt EVT File Services and Controller app C:WINDOWSsystem32configSysEvent.Evt 318 8A5981C0
system32 Disk folder Services and Controller app C:WINDOWSsystem32 C 8A5DCBF0
WindowsPowerShell.evt EVT File Services and Controller app C:WINDOWSsystem32configWindowsPowerShell.evt 328 8A57DA48
I am not sure what next to do?????
Process Explorer actually works great. I used to use it in place of the task mgr that comes with Windows. I am using Anvir now though.
My next suggestion would be to disable your network connections and reboot and see if that helps.
Also, try 1 by 1 going to your services list and disabling/stopping each of them that don't belong to the OS.
Sandeep you are welcome
SANDEEP & ALL OTHER READERS WHO SUFFER A COMPUTER FREEZE DUE TO CPU AND/OR RAM. Sorry guys with this "ALL CAPS" thing but it was important & we do care for each other
1) Pls pls pls also install Process Tamer. It tames your cpu if the cpu goes nuts
2) Pls pls pls also install CleanMem – it cleans your memory if your RAM &/Or Virtual Memory goes nuts.
3) On a bad day even both CPU & RAM can go nuts :(
Ashraf had given our blog family these savvy tips way back – read his blog, benefit, enjoy!
Ashraf had guided that many memory cleaner aka "RAM Cleaner apps" are either a "ripoff" or "ineffective" or worse still "both". Ashraf also explained why this is so & why CleanMem is an honourable & effective app
Therefore Sandeep kindly install Anvir, Process Tamer AND CleanMem. I did. I continue to benefit from it
Sandeep one more reason why I keep harping about Process Tamer.
Apart from the fact that your cpu has gone nuts & Process Tamer tames a nutty cpu there is one more reason. A nutty cpu owes its nuttiness also because it may be sending your computer usage logs to Microsoft. Perhaps you've been wiping off traces too frequently & then not wiped traces recently. Microsoft may just be hungry to eat the food you have cooked.
The hunger may get appeased over a little time & the cpu would stop being nutty then. Chill out! I've experienced it & am just sharing my experience.
Karen's suggestions are WOW!
Whatever else you do or not do – YOU NEED PROCESS TAMER right now. Man if a guy has jaundice he cannot take medicine for typhoid.
Since you could install Anvir even with a cpu nutty at 50% do the logical thing by installing Process Tamper even while the cpu is nutty at 50%. Go to the source of the problem my friend!
I would also check your event logs to see if you can find anything.
After that, you can try turning off the Microsoft services that do event logging, problem checking, etc.
I've never used Process Tamer, but I think Anvir can also limit the amount of CPU a specific process is using.
If the problem only occurs immediately after boot-up/login, the you can try msconfig and turn on the option for a "diagnostic boot".
Its not designed for this, but you could try using Game Booster (http://www.iobit.com/gamebooster.html) to smoke out the offending process. It can close most unnecessary processes with one click, so if this stops the craziness then you know the process is safe to kill. You can also go through the list it gives you and try each one by one till you find the culprit.
Friend Pwnana – Game Booster indeed is great. I've used it too! Sadly it is from the same family. It is a brother or sister of IOBit Security 360. Therefore Sandeep might be inclined to avoid it.
In fact I'd like to ask you or anyone else from our blog family if they can suggest an alternative to Game Booster. I am finding it hard myself precisely because it is a great app (I mean Game Booster). I am having it but am inclined to remove it. To be honest with you it has so far performed very well & also shown trustworthy behaviour. Its the "but then" which bothers me…..
Could you suggest me an alternative?
@ KAREN: Yes you are right Process Explorer is indeed a good program. I did disable the newtwork connection (LAN) but still no luck. Before disabling any services i will intsall process Tamer as suggested by Ramesh. Yes the problem start after booting up and goes away after say 30 minutes. I have tried booting up in safe mode (and i think many of the services don't run in safe mode) but the problem still comes and goes in 30 minutes. I will try to read the event log in event viewer and update the post accordingly and also boot my PC in diagnosis mode.
@ RAMESH: I will definately install process tamer on my machine tomorrow. I already had CleanMem and Antivir installed in that PC. I have also posted the results from Antivir in my above post.
@PWNANA: Process explorer also has an option to kill the crazy process so i won't instally Game Booster. Also i don't play games on my PC so no need to boost it for that.
Thanks Guys for all your support upto now.
Most Users Ever Online: wp_sferrorlog
Currently Browsing this Page:
Guest Posters: 9
Newest Members: Frank Dykes, theodas, Tai, IanFraser, jagadishd, jagidon
Administrators: Ashraf (1741), Locutus (1886), amnesia (270)