Solved

netman uses 50% CPU after boot, cannot stop Network Connection Service

Posted on 2008-09-29
8
1,603 Views
Last Modified: 2012-08-13
I am running Windows XP SP3 on a Dell Precision 390 with a dual-core processor. I cannot trace the source of the problem but basically what is happening is the CPU sits at about 50% after teh system boots and does not drop.

I used Process Explorer to identify that it is from a svchost.exe and the process is the Network Connections [Netman] process that is using the CPU.

I tried several things but ended up trying to stop the service to see if it was the issue. In the services.msc I get a time out error on the action to stop or restart the service. However, as soon as I click the action to stop or restart, my CPU goes to normal state at idle (0-2%). The connections all stay up and the service shows a status of "stopping".

I have searched everywhere on teh net and cannot seem to find a similar situation. Your help is very much appreciated.
0
Comment
Question by:rscrash69
  • 5
  • 3
8 Comments
 
LVL 22

Expert Comment

by:orangutang
ID: 22598132
0
 

Author Comment

by:rscrash69
ID: 22598217
Here is the hijackthis log file
hijackthis-log092908.txt
0
 

Author Comment

by:rscrash69
ID: 22598267
I have teh CA suite of products on my computer and it includes the spyware application which is running. It did not detect any spyware. Is the Malware application different in looking for this type of activity from the CA product?

I appreciate your quick response to this.
0
 
LVL 22

Accepted Solution

by:
orangutang earned 500 total points
ID: 22598346
I would scan with Malwarebytes' Anti-Malware even though you've already used another antivirus product. Your HijackThis log seems clean but  do you know what:
O4 - HKLM\..\RunOnce: [NCInstallQueue] rundll32 netman.dll,ProcessQueue
is? Try backing it and deleting it.
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 

Author Comment

by:rscrash69
ID: 22598567
I do not know what that is. What is the best way to bak it up and delete it? In hijack this it has a fix checked button but warns that it may be permanently deleted. Will this back it up?
0
 
LVL 22

Expert Comment

by:orangutang
ID: 22598632
Open regedit to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, right-click it, click export, and save it somewhere.
0
 

Author Comment

by:rscrash69
ID: 22599159
I have backed up that entry. The Malware scan is running. I will post response once the scan is complete.
0
 

Author Closing Comment

by:rscrash69
ID: 31501246
REmoving that key and rebooting the computer solved the issue. It also solved the issue of not being able to get to the Local Area Connection properties. I was getting an error stating that a property window was already open, which was not the case.

I believe the root cause was a failed uninstall attempt to Zune. Earlier I used UnZoone and removed the failed attempt but it must have left this behind. Not sure, but for others that read this it may have been related.

Thanks for your help.
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

INTRODUCTION The purpose of this document is to demonstrate the Installation and configuration of the Data Protection Manager product. Note that this demonstration was prepared on the basis of Windows OS is 2008 R2 and DPM 2010. DATA PROTECTI…
If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now