Solved

netman uses 50% CPU after boot, cannot stop Network Connection Service

Posted on 2008-09-29
8
1,617 Views
Last Modified: 2012-08-13
I am running Windows XP SP3 on a Dell Precision 390 with a dual-core processor. I cannot trace the source of the problem but basically what is happening is the CPU sits at about 50% after teh system boots and does not drop.

I used Process Explorer to identify that it is from a svchost.exe and the process is the Network Connections [Netman] process that is using the CPU.

I tried several things but ended up trying to stop the service to see if it was the issue. In the services.msc I get a time out error on the action to stop or restart the service. However, as soon as I click the action to stop or restart, my CPU goes to normal state at idle (0-2%). The connections all stay up and the service shows a status of "stopping".

I have searched everywhere on teh net and cannot seem to find a similar situation. Your help is very much appreciated.
0
Comment
Question by:rscrash69
  • 5
  • 3
8 Comments
 
LVL 22

Expert Comment

by:orangutang
ID: 22598132
0
 

Author Comment

by:rscrash69
ID: 22598217
Here is the hijackthis log file
hijackthis-log092908.txt
0
 

Author Comment

by:rscrash69
ID: 22598267
I have teh CA suite of products on my computer and it includes the spyware application which is running. It did not detect any spyware. Is the Malware application different in looking for this type of activity from the CA product?

I appreciate your quick response to this.
0
The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

 
LVL 22

Accepted Solution

by:
orangutang earned 500 total points
ID: 22598346
I would scan with Malwarebytes' Anti-Malware even though you've already used another antivirus product. Your HijackThis log seems clean but  do you know what:
O4 - HKLM\..\RunOnce: [NCInstallQueue] rundll32 netman.dll,ProcessQueue
is? Try backing it and deleting it.
0
 

Author Comment

by:rscrash69
ID: 22598567
I do not know what that is. What is the best way to bak it up and delete it? In hijack this it has a fix checked button but warns that it may be permanently deleted. Will this back it up?
0
 
LVL 22

Expert Comment

by:orangutang
ID: 22598632
Open regedit to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, right-click it, click export, and save it somewhere.
0
 

Author Comment

by:rscrash69
ID: 22599159
I have backed up that entry. The Malware scan is running. I will post response once the scan is complete.
0
 

Author Closing Comment

by:rscrash69
ID: 31501246
REmoving that key and rebooting the computer solved the issue. It also solved the issue of not being able to get to the Local Area Connection properties. I was getting an error stating that a property window was already open, which was not the case.

I believe the root cause was a failed uninstall attempt to Zune. Earlier I used UnZoone and removed the failed attempt but it must have left this behind. Not sure, but for others that read this it may have been related.

Thanks for your help.
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
In this article, I will show you HOW TO: Perform a Physical to Virtual (P2V) Conversion the easy way from a computer backup (image).
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

825 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question