Solved

CPU pegs from SVCHOST.EXE process, specifically ntdll.dll!RtlAllocateHeap+0x18c thread

Posted on 2007-04-07
2
736 Views
Last Modified: 2008-01-09
I have 10 pcs of the hundreds I care for that slow down to the point of being unusable - sometimes it clears itself after one to several minutes, sometimes you must reboot.  Task Manager shows it to be the SVCHOST.EXE process (which you are sometimes allowed to kill and sometimes not.)  Looking into it with Process Explorer shows it to be the following thread:  ntdll.dll!RtlAllocateHeap+0x18c.  It will climb up beyond 98% of CPU time, and the Context Switches climb like mad as it runs.  You can both kill or suspend this thread with Process Explorer.

I have one machine in front of me, and the svchost.exe process actually contains 3 of these identically-named threads.  Only one is the culprit, however - while I suspend it all is well, and I resume and it consumes the CPU - none of the other threads use any CPU time whether the bad one runs or is suspended.  (I have not looked to see whether the other machines have multiples of this process, but in all cases, there is only one that goes crazy, and it is always called ntdll.dll!RtlAllocateHeap+0x18c.)

My configurations vary somewhat, but all have SP2 on Windows XP and the latest patches delivered via Windows Update, plus versions of MS Office and Symantec or Norton AV.  For anti spyware, all the XP machines run Windows Defender.  I have had one machine show this even with the OS freshly loaded from the Dell Recovery Disk, before I loaded Office and the standard utilities.  I have too many people suffering too much pain for this, and am really hoping for an answer.  I have to believe other folks are seeing this as well, although I've searched EE multiple times over the last couple of months I've been seeing this, and have only seen a post or two, with no definitive solution.
0
Comment
Question by:orhiker
2 Comments
 
LVL 32

Accepted Solution

by:
r-k earned 250 total points
ID: 18871663
It might be the problem described here:

 http://searchwincomputing.techtarget.com/tip/0,289483,sid68_gci1249678,00.html

You could try installing the hotfix available here:

 http://support.microsoft.com/kb/927891/
0
 
LVL 47

Assisted Solution

by:rpggamergirl
rpggamergirl earned 250 total points
ID: 18871722
Yeah, it's something to do with the auto-updates software.
Some users just turned auto-updates off and then do a manual updates.

Sometimes after a manual updates you can turn of auto-updates again and things go well but sometimes it won't.
MS has to come up with a patched one day that really works hopefully.
0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Getting hacked is no longer a matter or "if you get hacked" — the 2016 cyber threat landscape is now titled "when you get hacked." When it happens — will you be proactive, or reactive?
One of the biggest threats facing all high-value targets are APT's.  These threats include sophisticated tactics that "often starts with mapping human organization and collecting intelligence on employees, who are nowadays a weaker link than network…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question