Solved

CPU pegs from SVCHOST.EXE process, specifically ntdll.dll!RtlAllocateHeap+0x18c thread

Posted on 2007-04-07
2
743 Views
Last Modified: 2008-01-09
I have 10 pcs of the hundreds I care for that slow down to the point of being unusable - sometimes it clears itself after one to several minutes, sometimes you must reboot.  Task Manager shows it to be the SVCHOST.EXE process (which you are sometimes allowed to kill and sometimes not.)  Looking into it with Process Explorer shows it to be the following thread:  ntdll.dll!RtlAllocateHeap+0x18c.  It will climb up beyond 98% of CPU time, and the Context Switches climb like mad as it runs.  You can both kill or suspend this thread with Process Explorer.

I have one machine in front of me, and the svchost.exe process actually contains 3 of these identically-named threads.  Only one is the culprit, however - while I suspend it all is well, and I resume and it consumes the CPU - none of the other threads use any CPU time whether the bad one runs or is suspended.  (I have not looked to see whether the other machines have multiples of this process, but in all cases, there is only one that goes crazy, and it is always called ntdll.dll!RtlAllocateHeap+0x18c.)

My configurations vary somewhat, but all have SP2 on Windows XP and the latest patches delivered via Windows Update, plus versions of MS Office and Symantec or Norton AV.  For anti spyware, all the XP machines run Windows Defender.  I have had one machine show this even with the OS freshly loaded from the Dell Recovery Disk, before I loaded Office and the standard utilities.  I have too many people suffering too much pain for this, and am really hoping for an answer.  I have to believe other folks are seeing this as well, although I've searched EE multiple times over the last couple of months I've been seeing this, and have only seen a post or two, with no definitive solution.
0
Comment
Question by:orhiker
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 32

Accepted Solution

by:
r-k earned 250 total points
ID: 18871663
It might be the problem described here:

 http://searchwincomputing.techtarget.com/tip/0,289483,sid68_gci1249678,00.html

You could try installing the hotfix available here:

 http://support.microsoft.com/kb/927891/
0
 
LVL 47

Assisted Solution

by:rpggamergirl
rpggamergirl earned 250 total points
ID: 18871722
Yeah, it's something to do with the auto-updates software.
Some users just turned auto-updates off and then do a manual updates.

Sometimes after a manual updates you can turn of auto-updates again and things go well but sometimes it won't.
MS has to come up with a patched one day that really works hopefully.
0

Featured Post

Salesforce Made Easy to Use

On-screen guidance at the moment of need enables you & your employees to focus on the core, you can now boost your adoption rates swiftly and simply with one easy tool.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
good comptia a+ teacher? 4 115
How to install Windows XP Driver 28 176
Pop up error related to internet explorer 5 76
Windows 8 rebooted without shutting down first error message 11 103
Provide an easy one stop to quickly get the relevant information on common asked question on Ransomware in Expert Exchange.
If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question