Hey all.
First of all....
NO spyware
NO viruses
NO malwares of any kind
HDD's are fine, no missing files
Images freshly RIS'ed
Only affects one model of laptop.
Ok...So basically explorer has a tendencay to get tanked around 50-75% CPU usage, and like I said it only affects a single model of laptop, HP NC9600. Usually this can be reproduced by right clicking a file, and seeing the context menu (have also used ShellExViewer to troubleshoot), sometimes just by browsing My Computer. Or, using the XP Menu Style, it gets stuck when navigating and waiting for a submenu to appear, like All Programs. Also, resuming from a standby, or a scrensaver can cause it...
I haev already removed some of the common causes of this symptom:
"Show common tasks in folders"
"Fade or slide menus into view"
"Transition effects for menus and ToolTips" No dice though...
Ok, so using Process Explorer, I haev narrowed down a thread that seems to occupy about 75-95% of Explorers usage..
Shlwapi.dll is always there with High CPU Usage when the system gets unresponsive. Here is a call stack of a few threads....
SHWLAPI.DLL
ntkrnlpa.exe!KiUnexpectedI
nterrupt+0
x121
ntkrnlpa.exe!ZwYieldExecut
ion+0x1c5e
hal.dll!HalpApcInterrupt+0
xc6
hal.dll!HalRequestSoftware
Interrupt+
0x3c
ntkrnlpa.exe!LsaDeregister
LogonProce
ss+0x16ba0
ntkrnlpa.exe!NtMakePermane
ntObject+0
xd8f
ntkrnlpa.exe!ObOpenObjectB
yName+0xea
ntkrnlpa.exe!LsaDeregister
LogonProce
ss+0xc7e5
ntkrnlpa.exe!KeReleaseInSt
ackQueuedS
pinLockFro
mDpcLevel+
0xb74
ntdll.dll!KiFastSystemCall
Ret+0x4
ntdll.dll!KiFastSystemCall
Ret
ntdll.dll!ZwOpenKey+0xc
ADVAPI32.dll!LocalBaseRegO
penKey+0xe
4
EXPLORER.EXE
ntkrnlpa.exe!KiUnexpectedI
nterrupt+0
x121
ntkrnlpa.exe!ZwYieldExecut
ion+0x1c5e
ntkrnlpa.exe!ZwYieldExecut
ion+0x24dd
win32k.sys+0x2f70
win32k.sys+0x3776
win32k.sys+0x3793
ntdll.dll!KiFastSystemCall
Ret+0x4
ntdll.dll!KiFastSystemCall
Ret
USER32.dll!WaitMessage+0xc
SHELL32.dll!Ordinal201+0x2
8
Explorer.EXE+0x1320e
Explorer.EXE+0x1a577
kernel32.dll!BaseProcessSt
art+0x23
I have only recently started to learn debugging, in my own environment, and through some of the dumps posted here, but I cant target this to a specific driver, or service. I am confident that it is either a driver problem. I have found minimal referecnes to ntkrnlpa.exe!KiUnexpectedI
nterrupt+0
x121, and have found a few things that support that claim, just need to see if any debuggers out there can shed some light...Thanks!!