Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

netman uses 50% CPU after boot, cannot stop Network Connection Service

Posted on 2008-09-29
8
Medium Priority
?
1,676 Views
Last Modified: 2012-08-13
I am running Windows XP SP3 on a Dell Precision 390 with a dual-core processor. I cannot trace the source of the problem but basically what is happening is the CPU sits at about 50% after teh system boots and does not drop.

I used Process Explorer to identify that it is from a svchost.exe and the process is the Network Connections [Netman] process that is using the CPU.

I tried several things but ended up trying to stop the service to see if it was the issue. In the services.msc I get a time out error on the action to stop or restart the service. However, as soon as I click the action to stop or restart, my CPU goes to normal state at idle (0-2%). The connections all stay up and the service shows a status of "stopping".

I have searched everywhere on teh net and cannot seem to find a similar situation. Your help is very much appreciated.
0
Comment
Question by:rscrash69
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 3
8 Comments
 
LVL 22

Expert Comment

by:orangutang
ID: 22598132
0
 

Author Comment

by:rscrash69
ID: 22598217
Here is the hijackthis log file
hijackthis-log092908.txt
0
 

Author Comment

by:rscrash69
ID: 22598267
I have teh CA suite of products on my computer and it includes the spyware application which is running. It did not detect any spyware. Is the Malware application different in looking for this type of activity from the CA product?

I appreciate your quick response to this.
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
LVL 22

Accepted Solution

by:
orangutang earned 2000 total points
ID: 22598346
I would scan with Malwarebytes' Anti-Malware even though you've already used another antivirus product. Your HijackThis log seems clean but  do you know what:
O4 - HKLM\..\RunOnce: [NCInstallQueue] rundll32 netman.dll,ProcessQueue
is? Try backing it and deleting it.
0
 

Author Comment

by:rscrash69
ID: 22598567
I do not know what that is. What is the best way to bak it up and delete it? In hijack this it has a fix checked button but warns that it may be permanently deleted. Will this back it up?
0
 
LVL 22

Expert Comment

by:orangutang
ID: 22598632
Open regedit to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, right-click it, click export, and save it somewhere.
0
 

Author Comment

by:rscrash69
ID: 22599159
I have backed up that entry. The Malware scan is running. I will post response once the scan is complete.
0
 

Author Closing Comment

by:rscrash69
ID: 31501246
REmoving that key and rebooting the computer solved the issue. It also solved the issue of not being able to get to the Local Area Connection properties. I was getting an error stating that a property window was already open, which was not the case.

I believe the root cause was a failed uninstall attempt to Zune. Earlier I used UnZoone and removed the failed attempt but it must have left this behind. Not sure, but for others that read this it may have been related.

Thanks for your help.
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Configuring Remote Assistance for use with SCCM
I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…

636 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question