Solved

netman uses 50% CPU after boot, cannot stop Network Connection Service

Posted on 2008-09-29
8
1,611 Views
Last Modified: 2012-08-13
I am running Windows XP SP3 on a Dell Precision 390 with a dual-core processor. I cannot trace the source of the problem but basically what is happening is the CPU sits at about 50% after teh system boots and does not drop.

I used Process Explorer to identify that it is from a svchost.exe and the process is the Network Connections [Netman] process that is using the CPU.

I tried several things but ended up trying to stop the service to see if it was the issue. In the services.msc I get a time out error on the action to stop or restart the service. However, as soon as I click the action to stop or restart, my CPU goes to normal state at idle (0-2%). The connections all stay up and the service shows a status of "stopping".

I have searched everywhere on teh net and cannot seem to find a similar situation. Your help is very much appreciated.
0
Comment
Question by:rscrash69
  • 5
  • 3
8 Comments
 
LVL 22

Expert Comment

by:orangutang
ID: 22598132
0
 

Author Comment

by:rscrash69
ID: 22598217
Here is the hijackthis log file
hijackthis-log092908.txt
0
 

Author Comment

by:rscrash69
ID: 22598267
I have teh CA suite of products on my computer and it includes the spyware application which is running. It did not detect any spyware. Is the Malware application different in looking for this type of activity from the CA product?

I appreciate your quick response to this.
0
 
LVL 22

Accepted Solution

by:
orangutang earned 500 total points
ID: 22598346
I would scan with Malwarebytes' Anti-Malware even though you've already used another antivirus product. Your HijackThis log seems clean but  do you know what:
O4 - HKLM\..\RunOnce: [NCInstallQueue] rundll32 netman.dll,ProcessQueue
is? Try backing it and deleting it.
0
Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

 

Author Comment

by:rscrash69
ID: 22598567
I do not know what that is. What is the best way to bak it up and delete it? In hijack this it has a fix checked button but warns that it may be permanently deleted. Will this back it up?
0
 
LVL 22

Expert Comment

by:orangutang
ID: 22598632
Open regedit to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, right-click it, click export, and save it somewhere.
0
 

Author Comment

by:rscrash69
ID: 22599159
I have backed up that entry. The Malware scan is running. I will post response once the scan is complete.
0
 

Author Closing Comment

by:rscrash69
ID: 31501246
REmoving that key and rebooting the computer solved the issue. It also solved the issue of not being able to get to the Local Area Connection properties. I was getting an error stating that a property window was already open, which was not the case.

I believe the root cause was a failed uninstall attempt to Zune. Earlier I used UnZoone and removed the failed attempt but it must have left this behind. Not sure, but for others that read this it may have been related.

Thanks for your help.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Recently Microsoft released a brand new function called CONCAT. It's supposed to replace its predecessor CONCATENATE. But how does it work? And what's new? In this article, we take a closer look at all of this - we even included an exercise file for…
In this article, I will show you HOW TO: Perform a Physical to Virtual (P2V) Conversion the easy way from a computer backup (image).
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

867 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now