Question

Server 2003 Spoolsv.exe 25% cpu

Asked by: stantechsvcs

Hi
I have a server that has a process, constantly using 25% CPU.  The process is spoolsv.exe and I have used process explore to view it in more detail.
If I use process explorer to look at thread it shows this at the top and shows that that has the cpu % of 25%.....  kernel32.dll!MulDiv+0x120
If I click that and select stack it shows lot of these ntkrnlpa.exe and also these......
ntdll.dll!KiFstSystemCallRet
User32.dll!FindWindowA+0x15
HPBMINI.dll!KillMiniinstaller+0xd90

I have removed all of the printers from the server and installed them as local printers on the machines.  There is just a fax under printers now, but it i not used.  If I disable the print spooler service the problem stops and then start about 5 minutes after I restart thne service.

Can anyone help me with this :-(.
Thanks
Derek

This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.

Subscribe now for full access to Experts Exchange and get

Instant Access to this Solution

  • Plus...
  • 30 Day FREE access, no risk, no obligation
  • Collaborate with the world's top tech experts
  • Unlimited access to our exclusive solution database
  • Never be left without tech help again

Subscribe Now

Asked On
2009-07-03 at 01:53:43ID24541861
Tags

Servr 2003

Topics

Windows 2003 Server

,

Computer Servers

Participating Experts
2
Points
0
Comments
9

Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.

  • "The time we save is the biggest benefit of Experts Exchange to Warner Bros. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange." Mike Kapnisakis, Warner Bros.
  • "Our team likes having a resource that is more secure than just using Google and most experts using this service really know their stuff. It's nice to look here first versus using Google." Dayna Sellner, Lockheed Martin
  • "Anytime that I've been stumped with a problem, 9 out of 10 times Experts Exchange has either the accepted solution or an open discussion of the potential solution to the problem." Kenny Red, eBay Inc.

See what Experts Exchange can do for you.

Got a question?

We've got the answer.

Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.

Screenshot of Experts Exchange Knowledgebase

Need individual assistance?

Our experts are ready to help.

If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.

Screenshot of Experts Exchange Knowledgebase

Want to learn from the best?

Read articles from industry experts.

Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.

Screenshot of an Article

Working on a long term project?

Store your work and research.

Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.

Screenshot of Experts Exchange Knowledgebase

Access the answers to your technology questions today.

Subscribe Now

30-day free trial. Register in 60 seconds.

What Makes Experts Exchange Unique?

Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Trusted by the world's most respected brands.

image of each brand's logo

Faithfully serving IT professionals since 1996.

Experts Exchange Logo

Try it out and discover for yourself.

Subscribe Now

30-day free trial. Register in 60 seconds.

Related Solutions

  1. Error - Spoolsv.exe
    I'm running a Citrix server and getting the following error: Category: (100) Event ID: 1000 Faulting application spoolsv.exe, version 5.2.3790.0, faulting module cpmmon.dll, version 2.3.1467.1, fault address 0x0000183b. When the machine first logs you in, you an error ab...
  2. spoolsv.exe 100%
    SBS 2000 latest servicepacks and updates; Have installed different hp printers;HP1500CLJ, HP 1320N, HP2100tn, HPCLJ3800. All shared via HP standard tcp/ip port on local server. After that installed the HP3390 Laserjet local on each computer via the HP cd wizard (to send faxes...
  3. spoolsv.exe crashing
    i have a PC that continually has spoolsv.exe crashing only seems to happen about 30sec after a print job is started. this seems to be user based, as it is only happening to one user. i have even started with a fresh install of windows and office and it still occurs. this is...
  4. spoolsv.exe high cpu %
    spoolsv.exe taking up 99% cpu. I tried to go into c:\windows\system32\spool\printers and delete what was in there but no files are listed. I ran virus scan. Any ideas?
  5. Outlook causing Spoolsv.exe to hog 99% of the CPU
    When I perform an action in outlook e.g sending maill even receiving mail. The cpu runs at 100% and the spoolsv.exe is the process hogging the CPU. When I stop the spool service the CPU drops to 5%. However the problem keeps coming back when using outlook.

Free Tech Articles

  1. WARNING: 5 Reasons why you should NEVER fix a computer for free.
    It is in our nature to love the puzzle. We are obsessed. The lot of us. We love puzzles. We love the challenge. We thrive on finding the answer. We hate disarray. It bothers us deep in our soul. W...
  2. SCCM OSD Basic troubleshooting
    SCCM 2007 OSD is a fantastic way to deploy operating systems, however, like most things SCCM issues can sometimes be difficult to resolve due to the sheer volume of logs to sift through and the dispe...
  3. Migrate Small Business Server 2003 to Exchange 2010 and Windows 2008 R2
    This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Windows 2008 R2 with Exchange 2010. For this migration to work you will need the fo...
  4. Create a Win7 Gadget
    This article shows you how to create a simple "Gadget" -- a sort of mini-application supported by Windows 7 and Vista. Gadgets can be dropped anywhere on the desktop to provide instant information, ...
  5. Outlook continually prompting for username and password
    There have been a lot of questions recently regarding Outlook prompting for a username and password whilst using Exchange 2007. There are a few reasons why this would happen and I will try to cover t...
  6. Backup Exchange 2010 Information Store using Windows Backup
    There seems to be quite a lot of confusion around the ability to backup Exchange 2010 using the built in Windows Backup feature. This stems from the omission of this feature prior to Exchange 2007 s...

Cloud Class Webinars

  1. Avoiding Bugs in Microsoft Access
    Alison Balter takes and in-depth look at avoiding bugs in Access. In this webinar you will learn about using the immediate window to debug your applications, invoking the debugger, using breakpoints to troubleshoot, stepping through code, setting the next statement to execute, ...
  2. Top 10 Best New Features in Visio 2010
    Scott Helmers gives live demonstrations of the top 10 new features in Visio 2010. This webinar will teach you how to create compelling diagrams by adding shapes to the page with a single click, linking the shapes in a diagram to data in Excel (or SQL Server, or SharePoint), ...
  3. IT Consultant Business Secrets Revealed
    Michael Munger, Experts Exchange tech pro and IT consultant, pulls back the curtain on his very successful businesses and answers question on every IT consultant and business owner should know about. He shares secrets on what he did to solve the 5 most common problems in IT, ...
  4. Disaster Recovery and Business Continuity
    Quest CTO, Mike Billon, gives an overview of the steps involved in building a dunamic disaster recovery plan. Through case studies and an examination of software/hardware tooles for monitoring and testing, you'll gain a better understandin of where you are, where you want ...
  5. Organize Your Visio Diagrams with Containers and Lists
    Scott Helmers uses cross functional flowcharts, wireframe diagrams, data graphic legends and seating charts to teach you: how to ustilize all three new structured diagram components in Visio 2010, the best practices for organizeing shapes in previous version of Visio, how to organize ...
  6. How to Us Objects, Properties, Events and Methods in Microsoft Access
    Alison Dalter gives an in-depbth look at objects, properties, events and methods in Microsoft Access. In this webinar you will learn about using the object browser, referring to objects, working with properties and methods, working with object variables, understanding the ...

Join the Community

Give a Little. Get a Lot.

Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.

Join the Community

Answers

 

by: robstaceyPosted on 2009-07-03 at 03:33:46ID: 24771409

Sounds like there might be a job stuck in the spool folder, even though you've removed the printers from the server.  Have a look in C:\windows\system32\spool\printers  This folder is where print jobs go when they're spooling.  Should be empty if nothing is printing but sometimes files get stuck. If there are any files they may be .spl and .shd files.  Make a note of the timestamp on these files and see if they match up with when this issue started happening.  Stop the spool service and delete these files and start the spool service again. If there's nothing in that folder the service has nothing to process so shouldn't hog CPU any more.  If there's nothing in there it might be worth looking into whether the faxing software you mentioned is doing anything.
Good luck

 

by: stantechsvcsPosted on 2009-07-03 at 03:54:26ID: 24771478

Thanks for the reply.  I have cleared the spool a few times and at this moment in time it is empty.

I really need to know how to analyse the threads and stacks to find out what could cause it.  Seems the problem is posted all over the Net, but never really an answer, just lots of reloads, which isn`t an option here :-).

Thanks
Derek

 

by: Kieran_BurnsPosted on 2009-07-03 at 04:02:12ID: 24771514

Try excluding the Spool folder from your AV scanner. It MAY be that the AV scanner is holding the process open. Another option is to set all printers to print directly to the printer rather than spool first

(alternately to test - disable the on access scan portion of your AV and see if this sorts it)

 

by: stantechsvcsPosted on 2009-07-03 at 04:06:31ID: 24771539

I do not run any AV on my servers.  I have UTM in front and desktop antivirus and as no one uses internet browser on our servers, i feel quite safe.
All the printers have been deleted, so there is no printing be carried out.  I don`t want to permanently disable the spool though because the fax software will need to be used in the future.

Thanks
Derek

 

by: robstaceyPosted on 2009-07-04 at 00:27:22ID: 24776173

You can download what used to be the sysinternals tools off Microsoft these days.  These include procmon and process explorer which really let you see what's going on in the machine regarding processes, applications, registry activity etc.  You may be able to find what's going on in there, be warned there can be a bucket load of information to wade through to get to the answer but I've solved gnarly issues with them before.

 

by: stantechsvcsPosted on 2009-07-05 at 01:57:44ID: 24779247

This server has now started freezing.  Screen just stops and system doesn`t respond to anything.  You can ping it but only get two replies (hard reset required).  This started to be every few days and is now twice per day.  I have the spoolsvs stopped, so that is not the problem.  When using process explorer I did notice that the spoolsv.exe caused lots of "hardware interrupst" which was using high cpu also.
I am begining to wonder if the server (ML150 G3) has gone bad, but how would I know which part to ask HP to change?  I have tried the RAM, so all that is left is Mainboard, cpu and smart array card.  It wouldbe easier to buy another basic ML150 and switch the drives over and see what happens, but G3`s are around anymore :-(.  
Any suggestions before I do something radical :-).

Thanks
Derek

 

by: robstaceyPosted on 2009-07-05 at 12:40:55ID: 24781089

My feel would be to go for the motherboard, if you're certain that all the cooling is working inside the case and it's not just that a fan has stopped and something's overheated and hung solid.   My home machine exhibited the exact same symptoms of hanging, stuck mouse pointer etc did it once a day for a few months, otherwise performed fine (for an aging box)
Get HP to replace the motherboard, realistically if it was the processor or  the controller you'd be more likely to get a spontaneous reboot.

 

by: stantechsvcsPosted on 2009-07-05 at 13:14:17ID: 24781183

Thanks for your reply.  I just got home from trying to fix it and think I have solved it.  The spoolsv service was taking cpu (25%) and then sometimes the explorer .exe which  made me remove all the printers etc.... etc.....  The server is only an ML 150 so doesn`t have ilo or a management processor, so the only monitoring software on there is for the raid.  The o/s is on the embedded sata RAID and the applications and files are on an E200 card.

I tried everything to find the threads/stacks etc....that were using the cpu but it only showed up as something called hardware interrupts.  After reading many posts I decided to do a defrag as one post suggested that a really fragmented server could hang.  I defragmented the F drive, but no change and then began to do the C drive.  The office was quiet and I was watching the defrag on a remote workstation when I heard a scratching noise and then notice the cpu % go up to 47%.  I ran to the server and the noise stopped and then started again, I took a guess and popped out one of the two hot plug o/s drives and the noise continued so I knew it was the other drive.  The noise then went away but because I had heard it I knew the drive had issues.  The RAID software said everything was fine, but after re-inserting the good drive and popping out the one that had made noise everything seemed fine.

I robbed a desktop drive from a spare pc and set it up as a hot spare, so it kicked in and rebuilt when I booted up and it seems fine even as I write this; so fingers crossed I found the issue J.

It was a HP drive, but under the sticker it says Seagate Barracuda and I don`t even think it was an Enterprise version.

Thanks again.

Derek

20120131-EE-VQP-002

3 Ways to Join

30-Day Free Trial

The Experts

98% positive feedback on 31,087 answers since March 2000. angeliii is a Microsoft Most Valuable Professional for his work with MS SQL Server & Develoment.

He has also proven his knowledge of Visual Basic Programming, PHP Scripting and Oracle Databases.

The Experts

97% positive feedback on 10,752 answers since July 2000. lrmoore has more than 18 years experience in the networking industry.

The six-time Mircosoft MVPs specialties include firewalls, virtual private networking, and network management.

Testimonials

"...and excellent source for support... Kind of like having your very own IT dept." Electriciansnet

Testimonials

"I was apprehensive at signing up at first. However... it has already made my life as an IT administrator much easier." JaCrews

Testimonials

"WOW! You guys have great, active, and knowledgeable people on here." moore50

Business Clients

Business Clients

In the Press

"If you’ve got a question... Experts Exchange can supply an answer.”

In the Press

"...an invaluable aid for both IT professionals and those who require tech support."

In the Press

"where IT professionals provide quick answers on just about any topic"

Business Account Plans

Loading Advertisement...