Need help with Ntoskrnl thread causing high CPU
Question
-
Hello, I am posting here for help with a CPU problem. The past few days, "System" process has been eating up 20-60% CPU so I have been looking for a solution. I found a topic on this forum that is very similar to my problem:http://forum.sysinternals.com/windows-7-ntoskrnlexe-spiking-problem_topic28929_page2.htmlUsing Process Explorer, it seems the problem is" toskrnl.exe!KeReleaseInStackQueuedSpinLock+0x1e0 "
I'm very new to using this program and any software used on this forum to solve problems... if you can help me solve this problem, it would be very appreciated.
All replies
-
the kernel is fine. The driver for your Atheros AR8152/8158 PCI-E Fast Ethernet Controller (NDIS 6.20) (L1c62x64.sys) causes the issues:
Your driver version is 1.0.1.42.
Try version 2.1.0.15 from here:
http://www.station-drivers.com/page/atheros.htm
and look if this fixes it. -
sfc showed no errors.sfc and registry set. Can you see callstack now?
yes and I see that the driver stdriverx64.sys causes it:
-
MagicAndre1981I remove the RamDisk program and it worked! Thanks so much for this !!!
-
https://www.dropbox.com/s/ih7guz0xt6gjh3z/trace_pool_alloc.etlThanks for your help
-
the drivers TMXPFlt.sys and VsapiNt.sys cause the high CPU usage.
From what I see those files are part of Trend Micro AV suite. Update the tool or remove it.
-
Hi Andre,You hit the nail on the head!I have disabled the Windows 7 Driver Verifier Manager (instructions @ http://www.sevenforums.com/tutorials/101379-driver-verifier-enable-disable.html) and restarted the system and now the laptop is functioning very fast again :)I wonder how that thing got enabled a few days ago, I had never heard of that Driver Verifier before, but that is not very important as I know now how to fix it.Now is a good time to start a full HDD backup.Thank you so much! :belgianbeer4u
-
wired
We figured it out and this is what is important. Here is a picture of WPA so that you can see this the next time yourself:
-
the CPU usgae comes from the AMD GPU driver (atikmdag.sys):
Update to the 14.4 driver (last version that supports Windows 8 (6.2.9200) and look if this fixes it.
-
No, it's not too much.It's normal for a Ultrabook.I notice that "Lenovo Solution Center" didn't install the "power management driver"Now System is under 1%. Maybe i find the problem
-
Hi MagicAndre,Further research shows that many different hardware and/or driver problems can cause this problem. Different solutions for the same symptoms are reported by many people in different forums, including BIOS and driver updates, bad hardware (motherboards, Ethernet adapters, etc.), and driver settings for a variety of hardware such as video, WiFi, and Ethernet adapters. I'm sure you already know this, but I'll mention it for anyone researching this topic.In my case, ACPI.sys+0x1af7c was causing a high interrupt, DPC, and context switch rate (~ 100,000/sec) and hence high CPU usage. Searching for "ACPI.sys+0x1af7c" narrowed down the results so using this offset (or whatever offset others may have), as reported in Process Explorer, might be helpful to others. I assume that this is the binary offset into ACPI.sys which locates where in the acpi.sys driver this is happening so may help narrow down the problem.After trying many things, I found a forum entry with a suggestion to disable the Ethernet adapter's "Wake on Magic Packet" and "Wake on Pattern Match" in the driver's Advanced Tab in Device Manager. This worked instantly for me without even having to reboot. My adapter also has a "Wake on Magic Packet from power off state" option. Either of the first two options mentioned above will cause the problem, but this last one can remain enabled without issue. My adapter is an Intel I217-LM in a Dell E6540 laptop.Here's the link to the original forum post:I would upload a screen shot from my Ethernet adapter's settings menu but it exceeds the size allowed.So I'm a satisfied customer
and maybe this entry will help someone else. Your suggestions pushed me in the right direction to find an answer.
Thanks for your help,DoubleE -
Hi, I followed this as well and found that Qw.exe (a Quicken file) was running the CPU at 94% and sending a hot blast of air out the fan
.
The interesting part of this is that I hadn't used Quicken for some hours and closed it. It was not showing up on CodeStuff Starter as a running program - I often use this to turn off programs that continually insist on loading up at startup eg Zoner Photo and Java Update, to name but two.
I've had a look at a few other threads of yours and you are certainly a very handy person to have on here. keep up the great work.
Cheers -
the CPU usage comes from SRTSP64.SYS from symantec. Others already reported this:
http://www.symantec.com/connect/forums/srtsp64sys-cpu-usage-high
http://community.norton.com/t5/Norton-Internet-Security-Norton/SRTSP64-SYS-huge-CPU-usage/td-p/644495
-
the command works fine. Make sure you use the 8.1 SDK/WPT:
-
The CPU usage comes from ntoskrnl.exe!RtlScrubMemory. This is a function which fills the RAM with random data (ntoskrnl.exe!RtlpGenericRandomPatternWorker) to test the DRAM. This happens while the idle maintenance scheduled task runs. So a workaround is to disable this task. This is by design so you can't fix it.
-
Could you maybe also explain how you analyze the ETL file, so in the future I can find the problem myself ?
Microsoft explained it here:
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-42-WPT-CPU-Analysis
The CPU usage comes from scanning the host file (netbt.sys!DelayedScanLmHostFile).
Do you use the host file to block ads? -
You also have the L1C62x64.sys issue:
-
Hi, I'm having the same issue with CPU usage. The system process never return to 0 and it always take 3-7%.
the CPU usage spikes of the kernel come from the realtek network card driver:
Update the driver, your driver is from 2013 and a bit outdated (7.077.1126.2013):
http://www.realtek.com.tw/downloads/downloadsView.aspx?Langid=1&PNid=13&PFid=5&Level=5&Conn=4&DownTypeID=3&GetDown=false -
Hello I would greatly appreciate if you could take a look at my .etl file. Im going insane
. System uses alot of CPU whenever im downloading something from the web or through the network. I have tried three different network cards but the problem persists.
http://1drv.ms/1rDJ1xQ -
the CPU usage spikes of the kernel come from the realtek network card driver:
Update the driver, your driver is from 2013 and a bit outdated (7.077.1126.2013):
http://www.realtek.com.tw/downloads/downloadsView.aspx?Langid=1&PNid=13&PFid=5&Level=5&Conn=4&DownTypeID=3&GetDown=false
Hi, thanks for looking into this for me. I installed the new driver but system process still take CPU. I monitored another one after I updated driver. Can you look into it again? Thanks in advance
https://drive.google.com/file/d/0BzfBlA1ddfzteDBXekVlYzRzYmM/view?usp=sharing
Updated: It really is a problem with realtek network card, I disabled LAN and system process CPU usage returns to 0
-
System uses alot of CPU whenever im downloading something from the web or through the network.
Please remove the Stonesoft VPN Access Client (which removes waclient.sys) and see if this fixes it.
Also, don't download videos (Boardwalk.Empire.S01-S05.COMPLETE.720p) via torrent ;) I think you use the VPN to hide your IP while downloading illegal stuff -
System uses alot of CPU whenever im downloading something from the web or through the network.
Please remove theStonesoft VPN Access Client(which removes waclient.sys) and see if this fixes it.Also, don't download videos (Boardwalk.Empire.S01-S05.COMPLETE.720p) via torrent ;) I think you use the VPN to hide your IP while downloading illegal stuffFound the culprit, it was the Portwise Access Client that we use where I work to VPN to our network. Hope that might help someone else. -
Edit: nevermind, I found it. http://www.filedropper.com/highcpuusage-copy
the CPUusage comes from function ntoskrnl.exe!KeAcquireSpinLockRaiseToDpc and ntoskrnl.exe!KeReleaseSpinLock.
We already had such thing last year:
http://forum.sysinternals.com/need-help-with-ntoskrnl-thread-causing-high-cpu_topic29289_post143414.html?KW=KeAcquireSpinLockRaise#143414
The next CPU usage of a driver which I see is the usbfilter.sys. This is an AMD driver. Remove this AMD usb driver and look if this improves it. -
Please take a look and tell me who should I blame for that voracity?
please remove Acronis and see if this helps:
-
MagicAndre1981Thank you!For some unknown reason Acronis was unable to uninstall itself from "Add/Remove", so I just renamed its "tdrpm251.sys". After that system boots fine, and so far looks good.Strange thing is, that Acronis was installed in my system very long time ago, and everything was fine - no sign of high CPU usage. That strange cpu usage begins shortly after I installed VmWare 10.Anyway, the CPU usage now looks normal, thank you again!
-
MagicAndre1981You are right - power saving was set to "balanced" and for some reason it sets the lowest CPU multiplier possible which is x8. And it gives 800 Mhz.Now I set it to "High Performance" and CPU ratio is locked at 100% which gives us ~4300 Mhz.However high CPU consuming still take place.I have a strong feeling that CPU usage like this is something more than just regular sum of all calls.Someone bad did it, but who?Latest xperf:
-
I can't see any call that consumes a lot of CPU:
All use a bit and this sums up to 16%.
-
Hello, I need your help before I go mad or throw out the computer.
Notebook Lenovo Y450, clean installation Windows 7.
CPU consumption without load for NT Kernel & System 60-80%.
I have no idea what's going on, the computer is not suitable even for web browsing
Please take a look and tell me what should I do.
https://dl.dropboxusercontent.com/u/1518729/highCPUUsage.7z
-
you have an issue with USB ports. The CPU usage comes from usbhub.sys!UsbhPortRecycle/usbhub.sys!UsbhDisablePort:
We already had such an issue here:
http://forum.sysinternals.com/need-help-with-ntoskrnl-thread-causing-high-cpu_topic29289_post143512.html#143512
-
Hi MagicAndre
I upgraded my Lifebook A544 with an 840 EVO and a WD Scorpio Black as ODD raplacement. With last bios 1.17 ssd goes at only 3 gb/s.After hours of updating everythings I just solved downgrading bios to v1.13: now SSD goes at full speed but there is some issue with Power Management, ACPI.SYS or something this. While I don't know how fix the problem, I really hope you can
I sent the kernel as PM
Thank you very much!