Re: CPU pegs near 100%, mysterious log entry

Aha I think I found something. For some mysterious reason (no error in the log) Windows has been busy resynching the mirror drive. The drives are showing Healthy but it's resynching every partition anyway. This is Windows RAID (I decided I could not trust the motherboard's built in Raid after a few days of trying the machine way back when. I also figured, wrongly it seems, that having Windows let me know if it found a problem in the RAID was worth the performance hit). The synch process is not showing in task manager AFAIR. Now, I don't know whether it is resynching because of the hard shutdown, or because of something that happened before I had to do a hard reboot.

I also found that there was a ntfrs error 13568 that may or may not have been connected with the events above. Seems it happened when I did an orderly reboot after the hard reboot. I went through the steps to regenerate the replica tree manually, although it looks like it had been done automatically a few seconds after the error was logged.

On occasion also sqlserv.exe, but I assume that is when email comes or goes.

BTW, I had tried the tasklist /svc for the svchost.exe PID but it wast not very helpful. This is was PID is for a grab bag of stuff: AeLookupSvc, AudioSrv, BITS, Browser, CryptSvc, dmserver, EventSystem, helpsvc, lanmanserver, lanmanworkstation, Messenger, Netman, Nla, RasMan, RemoteAccess, Schedule, seclogon, SENS, ShellHWDetection, winmgmt, wuauserv

C_O

"Les Connor [SBS Community Member - SBS MVP]" <les.connor@xxxxxxxxxxxx> wrote in message news:%237aM4KwQGHA.5924@xxxxxxxxxxxxxxxxxxxxxxx
So exactly which process is taking high CPU as shown in Task Manager. One of the svchost.exe processes?

If so, add the PID field to taskmanager, and note the PID of the offending svchost.exe.

From a command prompt - run tasklist /svc and locate the PID. What is running (servcies) in that svchost.exe?

--
Les Connor [SBS Community Member - SBS MVP]
-----------------------------------------------------------
SBS Rocks !
----------------------
"Tell me and I'll forget. Show me and I'll remember. Involve me and I'll understand." - Confucius


"CO-DBA-SC-EL" <dx6490@xxxxxxxxx> wrote in message news:eWS1yOvQGHA.1096@xxxxxxxxxxxxxxxxxxxxxxx
Update. I shut down the TrendMicro ScanMail services and it made no significant difference. With those shut down the top CPU users shown in TM (as eyballed over a couple of minutes) are svchost.exe, wmiprvse.exe. Also a brief appearance by mssbsssr.exe which then disappeared from active process list. I now see dips to about 88 % in the usage graph, but nothing below that. Memory usage is pretty flat, with about 294K of physical memory (out of 1GB) available.

C_O

"Robert L [MS-MVP]" <noreply@xxxxxxxxxxx> wrote in message news:eImETAuQGHA.4952@xxxxxxxxxxxxxxxxxxxxxxx
use msconfig disable some suspected software and reboot it. post back with the result.




.

Relevant Pages

  • Re: CPU pegs near 100%, mysterious log entry
    ... log) Windows has been busy resynching the mirror drive. ... showing Healthy but it's resynching every partition anyway. ... orderly reboot after the hard reboot. ... This is was PID is for a grab bag of stuff: ...
    (microsoft.public.windows.server.sbs)
  • Re: OE Generates c0000005 (access violation) How to correct?
    ... You really should visit the Windows Update page to update your system to SP2 ... >> George Hester ... The PID changes so using ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: Windows XP WMI Reinstall
    ... c:\>tlist -s | findstr /i winmgmt ... This posting is provided "AS IS" with no warranties, and confers no rights. ... > Facility: Windows ... I couldn't get a PID for the winmgmts process because it's not ...
    (microsoft.public.win32.programmer.wmi)
  • Re: Unable to Copy and Paste
    ... Ramesh, Microsoft MVP ... Windows XP Troubleshooting ... sort using the PID column so that you can locate the process easily. ...
    (microsoft.public.windowsxp.help_and_support)
  • Heavy Disk Acvtivity when Restarting/Booting
    ... I am having an ongoing performance problem with Windows XP Pro on my 1.3GHz, ... SpyBot scan, defrag, disk clean up, etc. ... "PID eq " where (pid number is the PID number of an instance of ...
    (microsoft.public.windowsxp.basics)
Quantcast