• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1687
  • Last Modified:

netman uses 50% CPU after boot, cannot stop Network Connection Service

I am running Windows XP SP3 on a Dell Precision 390 with a dual-core processor. I cannot trace the source of the problem but basically what is happening is the CPU sits at about 50% after teh system boots and does not drop.

I used Process Explorer to identify that it is from a svchost.exe and the process is the Network Connections [Netman] process that is using the CPU.

I tried several things but ended up trying to stop the service to see if it was the issue. In the services.msc I get a time out error on the action to stop or restart the service. However, as soon as I click the action to stop or restart, my CPU goes to normal state at idle (0-2%). The connections all stay up and the service shows a status of "stopping".

I have searched everywhere on teh net and cannot seem to find a similar situation. Your help is very much appreciated.
0
rscrash69
Asked:
rscrash69
  • 5
  • 3
1 Solution
 
rscrash69Author Commented:
Here is the hijackthis log file
hijackthis-log092908.txt
0
 
rscrash69Author Commented:
I have teh CA suite of products on my computer and it includes the spyware application which is running. It did not detect any spyware. Is the Malware application different in looking for this type of activity from the CA product?

I appreciate your quick response to this.
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
orangutangCommented:
I would scan with Malwarebytes' Anti-Malware even though you've already used another antivirus product. Your HijackThis log seems clean but  do you know what:
O4 - HKLM\..\RunOnce: [NCInstallQueue] rundll32 netman.dll,ProcessQueue
is? Try backing it and deleting it.
0
 
rscrash69Author Commented:
I do not know what that is. What is the best way to bak it up and delete it? In hijack this it has a fix checked button but warns that it may be permanently deleted. Will this back it up?
0
 
orangutangCommented:
Open regedit to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, right-click it, click export, and save it somewhere.
0
 
rscrash69Author Commented:
I have backed up that entry. The Malware scan is running. I will post response once the scan is complete.
0
 
rscrash69Author Commented:
REmoving that key and rebooting the computer solved the issue. It also solved the issue of not being able to get to the Local Area Connection properties. I was getting an error stating that a property window was already open, which was not the case.

I believe the root cause was a failed uninstall attempt to Zune. Earlier I used UnZoone and removed the failed attempt but it must have left this behind. Not sure, but for others that read this it may have been related.

Thanks for your help.
0

Featured Post

Prep for the ITIL® Foundation Certification Exam

December’s Course of the Month is now available! Enroll to learn ITIL® Foundation best practices for delivering IT services effectively and efficiently.

  • 5
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now